This week's June Static Analysis Release includes the following:

Updated language and framework support

.NET

• Improved classification of first-party .NET assemblies to better distinguish application code from third-party dependencies.

Apex

• Improved detection of vulnerabilities involving tainted data flows through public methods.
• Improved detection of CWE-532 flaws.

Apple Platforms

• Improved support for Security APIs.

Dart and Flutter

• Adds support for Dart 3.12 and Flutter 3.44.

Kotlin

• Adds support for Kotlin 2.4.

Java

• Improved third-party detection.
• Improved detection and classification of ForgeRock third-party dependencies in Maven-based projects.
• Improved detection of CWE-918 flaws.

JavaScript

• Improved CWE-73 flaw detection.
• Improved third-party detection.

Python

• Improved third-party detection.

RPG

• Improved RPG parsing.

Other languages

• Improves detection of CWE-259 and CWE-798 flaws across all languages to reduce false positives.