Skip to content

JS: Modeling of aws-sdk clients* #20135

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 13 commits into
base: main
Choose a base branch
from
Open

JS: Modeling of aws-sdk clients* #20135

Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
fda74cb
Added test cases for v2 and v3 sql injection of dynamodb
Napalys Jul 28, 2025
94fb606
Added modeling of dynamodb v3 for sql injections
Napalys Jul 28, 2025
b2d1821
Added modeling for V2 of dynamoDB
Napalys Jul 28, 2025
5e09416
Added change note
Napalys Jul 28, 2025
44008a8
Added test cases for client-s v2 and v3 sql injection
Napalys Jul 29, 2025
1af289c
Added modeling of client-s3 v2 and v3
Napalys Jul 29, 2025
c725191
Added test cases for athena v2 and v3 for sql injections
Napalys Jul 29, 2025
238568d
Added modeling of athena v2 and v3 for sql injections
Napalys Jul 29, 2025
0588274
Added test cases for client-rds-data for sql injections
Napalys Jul 29, 2025
a8a6fdf
Added modeling of rds v2 and v3 for sql injections
Napalys Jul 29, 2025
0806bd6
Updated change note
Napalys Jul 29, 2025
2ca5d81
Added tests and modeling of database-access-result
Napalys Jul 29, 2025
d93033b
Unified aws-db modeling into singular file
Napalys Jul 29, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Updated change note
  • Loading branch information
@Napalys
Napalys committed Jul 29, 2025
commit 0806bd686f0b05223865999995d89eefc630e24e
2 changes: 1 addition & 1 deletion javascript/ql/lib/change-notes/2025-07-28-dynamodb.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
---
category: minorAnalysis
---
* Added support for the `aws-sdk` and `@aws-sdk/client-dynamodb` packages for DynamoDB PartiQL operations.
* Added support for the `aws-sdk` and `@aws-sdk/client-dynamodb`, `@aws-sdk/client-athena`, `@aws-sdk/client-s3`, and `@aws-sdk/client-rds-data` packages. This enables detection of SQL injection vulnerabilities in DynamoDB PartiQL operations, Athena queries, S3 select expressions, and RDS Data API calls.
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy