You can find most of security issues with Pysa that you can model as a taint flow problem. Examples could be flows to function that enable code execution or she

You can find most of security issues with Pysa that you can model as a taint flow problem. Examples could be flows to function that enable code execution or shell injection, SQL injection, SSRF, XSS and many others. As long as you can model the security issue in a taint-flow model then Pysa should be able to detect these issues. These are the configuration we share with Pysa where you can find examples of bug categories we detect https://github.com/facebook/pyre-check/blob/master/stubs/taint/taint.config https://github.com/facebook/pyre-check/blob/master/stubs/tai...