Next week's September Static Analysis Release includes the following:

Updated language and framework support

.NET

• Improved CWE-259 and 798 flaw detection, resulting in a reduction in false positives.

Android

• Enhanced support for Android 16.

Apple Platforms

• Adds support for iOS 27.

Go

• Adds support for Go 1.27.

PL/SQL

• Improves parsing of PL/SQL code and scan performance.

Python

• Improved detection of CWE-89 vulnerabilities in PySpark applications.
• Improved SQLAlchemy analysis to reduce false positives when detecting CWE-89 vulnerabilities.
• Improves detection of third-party code.

RPG

• Improved detection of CWE-200 flaws to reduce false positives.
• Improved analysis of CALL commands to enhance detection of CWE-252 flaws.

Other languages

• Improves detection of CWE-259 and CWE-798 flaws across all languages to reduce false positives.