VLC 3.0.13 fixes a vulnerability that we identified automatically using joern-scan and reported a few weeks back. In particular, the following query that is part of joern-scan's default bundle pointed to the flaw. {val src = cpg.method(".*malloc$").callIn.where(_.argument(1)

What is Plume?Plume is a library which makes use of Soot to transform JVM bytecode into code property graphs. Given Java class files, the JVM bytecode is transformed into Soot's UnitGraph representation with call graphs constructed using either Class Hierarchy Analysis (CHA) or