github / github/codeql

Add support for Java Project Reactor

Open
#8,338 0 comments 3 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

[Project Reactor](https://projectreactor.io/) is fully non-blocking and provides efficient demand management. It directly interacts with Java's functional API, CompletableFuture, Stream, and Duration. We need to model the Flux and Mono classes to enable taint flow through them

The lack of support was part of the reason for not reporting [CVE-2022-22947](https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.