search

cs-au-dk / jelly

JavaScript/TypeScript static analyzer for call graph construction, library usage pattern matching, and vulnerability exposure analysis
MIT License
325 stars 25 forks source link

Vulnerability location infomation. #16

Open seng1e opened 8 months ago

seng1e commented 8 months ago

https://github.com/cs-au-dk/jelly/blob/7cc17e69e358b2c3dd106f17d70a7f355afe3277/tests/vulnerabilities/sample.json#L66C1-L70C69

Hi, I just use the vulnerability matches function provided by jelly, and have several questions:

  1. How to definition the location about vulnerability, is there any document about it? (location like link above)
  2. If one vulnerability have multi position need statement in vulnerability file, how should I do?