mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
Marius CiepluchandClaude Opus 5.5
83cca9894f
This is a source-only diagnostic: no engine and no model. At each v2 vulnerable pin, every call matching the family's shipped sink vocabulary becomes a candidate, attributed to its enclosing function. - The declared vulnerable function is a candidate in 2/17 cases (Medplum, GoPay); the ranker's top 20 managed 1/17. - A fix-changed or site file is among the candidates in 8/17. - Candidates per repository range from 2 to 904 functions. The misses are vocabulary, not direction. Examples: wp_redirect, download_url, spawn(shell:true), ky(), requests.Session().get, sympy parse_expr, Jinja from_string().render, Mongo collection.find, JCR-SQL2 createQuery, TypeORM andWhere template strings, and CORSMiddleware(allow_origins=["*"]) are not named. v2 is spent for tuning, so this informs design and qualifies nothing. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo