Commits

Commit history

1. Commits on Jun 18, 2026

   • JS: Add and reclassify prompt-injection sinks for AI SDKs

     Show description for ea87f59
     

     BazookaMusic

     and

     Copilot

     committed
     ea87f59View commit details

     Copy full SHA for ea87f59

     View code at this pointBrowse repository at this point
2. Commits on Jun 17, 2026

   • Merge branch 'main' into bazookamusic/cwe-1427

     BazookaMusic

     authored
     57f2006View commit details

     Copy full SHA for 57f2006

     View code at this pointBrowse repository at this point

   • 1. Enable inline expectations for tests

     Show description for c444f41
     BazookaMusic

     committed
     c444f41View commit details

     Copy full SHA for c444f41

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into add-yaml-comments

     MathiasVP

     committed
     c12cf88View commit details

     Copy full SHA for c12cf88

     View code at this pointBrowse repository at this point
3. Commits on Jun 15, 2026

   • Merge branch 'main' into bazookamusic/cwe-1427

     BazookaMusic

     authored
     7c11f19View commit details

     Copy full SHA for 7c11f19

     View code at this pointBrowse repository at this point
4. Commits on Jun 11, 2026

   • Merge branch 'main' into patch-1

     mattcosta7

     authored
     923fe2dView commit details

     Copy full SHA for 923fe2d

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into bazookamusic/cwe-1427

     BazookaMusic

     authored
     17dbf03View commit details

     Copy full SHA for 17dbf03

     View code at this pointBrowse repository at this point

   • Refine SystemPromptInjection alert message and move test to stable

     Show description for 7bd5abf
     BazookaMusic

     committed
     7bd5abfView commit details

     Copy full SHA for 7bd5abf

     View code at this pointBrowse repository at this point

   • Promote user prompt injection query to stable security

     Show description for e612db2
     BazookaMusic

     committed
     e612db2View commit details

     Copy full SHA for e612db2

     View code at this pointBrowse repository at this point
5. Commits on Jun 6, 2026

   • Add experimental JS query for SSRF guards missing IPv6-transition unwrap

     Show description for e93bc11
     tonghuaroot

     committed
     e93bc11View commit details

     Copy full SHA for e93bc11

     View code at this pointBrowse repository at this point
6. Commits on Jun 4, 2026

   • JS: Add tests.

     MathiasVP

     committed
     e8f7454View commit details

     Copy full SHA for e8f7454

     View code at this pointBrowse repository at this point

   • add openrouter support

     BazookaMusic

     committed
     078d15eView commit details

     Copy full SHA for 078d15e

     View code at this pointBrowse repository at this point
7. Commits on May 20, 2026

   • move system prompt injection to non-experimental

     BazookaMusic

     committed
     6c5c8e1View commit details

     Copy full SHA for 6c5c8e1

     View code at this pointBrowse repository at this point
8. Commits on May 15, 2026

   • add tests for langchain and remove wrong model for guardrails agent

     BazookaMusic

     committed
     5ef09a1View commit details

     Copy full SHA for 5ef09a1

     View code at this pointBrowse repository at this point

   • Add run from agents into the user prompt and fix an issue with classifying it as a system prompt injection

     BazookaMusic

     committed
     fe7eabdView commit details

     Copy full SHA for fe7eabd

     View code at this pointBrowse repository at this point

   • add barrier when data flows into user messages for system prompt detection, remove embeddings from user prompt injection query

     BazookaMusic

     committed
     535adc7View commit details

     Copy full SHA for 535adc7

     View code at this pointBrowse repository at this point
9. Commits on May 13, 2026

   • remove guardrails sanitizer for now

     BazookaMusic

     committed
     9c13626View commit details

     Copy full SHA for 9c13626

     View code at this pointBrowse repository at this point
10. Commits on May 5, 2026

    • Update KnownDirective.expected

      mattcosta7

      authored
      1855003View commit details

      Copy full SHA for 1855003

      View code at this pointBrowse repository at this point

    • change note and test

      mattcosta7

      committed
      0caa483View commit details

      Copy full SHA for 0caa483

      View code at this pointBrowse repository at this point
11. Commits on May 4, 2026

    • changes for spliting into system and user

      BazookaMusic

      committed
      74a3ba1View commit details

      Copy full SHA for 74a3ba1

      View code at this pointBrowse repository at this point
12. Commits on Apr 30, 2026

    • JS: Add prompt injection detection (CWE-1427) for OpenAI, Anthropic, and Google GenAI SDKs

      Show description for 0b7133c
      BazookaMusic

      committed
      0b7133cView commit details

      Copy full SHA for 0b7133c

      View code at this pointBrowse repository at this point
13. Commits on Apr 28, 2026

    • Model res.json and res.jsonp as Vercel response sinks

      Show description for 18b06f1
      

      murderteeth

      and

      claude

      committed
      18b06f1View commit details

      Copy full SHA for 18b06f1

      View code at this pointBrowse repository at this point

    • Regenerate DatabaseAccesses.expected for new vercel.ts fixture

      Show description for 1b87140
      

      murderteeth

      and

      claude

      committed
      1b87140View commit details

      Copy full SHA for 1b87140

      View code at this pointBrowse repository at this point
14. Commits on Apr 25, 2026

    • Merge branch 'main' into js/vercel-node-framework

      murderteeth

      authored
      a6dba9eView commit details

      Copy full SHA for a6dba9e

      View code at this pointBrowse repository at this point
15. Commits on Apr 13, 2026

    • Address Copilot review nits

      Show description for 4791532
      

      murderteeth

      and

      claude

      committed
      4791532View commit details

      Copy full SHA for 4791532

      View code at this pointBrowse repository at this point

    • Recognize legacy @now/node type aliases

      Show description for cff0734
      

      murderteeth

      and

      claude

      committed
      cff0734View commit details

      Copy full SHA for cff0734

      View code at this pointBrowse repository at this point

    • JS: Recognize Fastify per-route rate limiting

      hvitved

      committed
      7a48409View commit details

      Copy full SHA for 7a48409

      View code at this pointBrowse repository at this point

    • JS: Add test case for Fastify per-route rate limiting

      hvitved

      committed
      fef582cView commit details

      Copy full SHA for fef582c

      View code at this pointBrowse repository at this point
16. Commits on Apr 12, 2026

    • JS: Add support for @vercel/node serverless functions

      Show description for dfe0559
      

      murderteeth

      and

      claude

      committed
      dfe0559View commit details

      Copy full SHA for dfe0559

      View code at this pointBrowse repository at this point
17. Commits on Mar 16, 2026

    • Merge pull request #21368 from asgerf/browser-sources

      Show description for 22f16dd
      asgerf

      authored
      22f16ddView commit details

      Copy full SHA for 22f16dd

      View code at this pointBrowse repository at this point
18. Commits on Mar 13, 2026

    • JS: Address PR review comments

      Show description for 821cc0e
      

      asgerf

      and

      Copilot

      committed
      821cc0eView commit details

      Copy full SHA for 821cc0e

      View code at this pointBrowse repository at this point
19. Commits on Mar 12, 2026

    • Add QL test for bun/tsx shebang recognition in TypeScript files

      Show description for b8c44be
      

      asgerf

      and

      Copilot

      committed
      b8c44beView commit details

      Copy full SHA for b8c44be

      View code at this pointBrowse repository at this point
20. Commits on Mar 11, 2026

    • JS: Add tests in request forgery queries

      asgerf

      committed
      4a001f9View commit details

      Copy full SHA for 4a001f9

      View code at this pointBrowse repository at this point
21. Commits on Mar 5, 2026

    • Merge pull request #21369 from asgerf/js/this-bindings

      Show description for c9fa7fa
      asgerf

      authored
      c9fa7faView commit details

      Copy full SHA for c9fa7fa

      View code at this pointBrowse repository at this point
22. Commits on Mar 4, 2026

    • Update expected test output column numbers

      owen-mc

      committed
      99a4fe4View commit details

      Copy full SHA for 99a4fe4

      View code at this pointBrowse repository at this point