github / codeql

Watch 50
Star 933
Fork 238

Code
Issues 111
Pull requests 95
Actions
Projects 0
Security
Insights

Code Issues 111 Pull requests 95 Projects 0 Actions Security Pulse

Labels 23 Milestones 3

New pull request New

95 Open 3,057 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

JS: apply the unique aggregate where trivially applicable

#3504 opened May 18, 2020 by erik-krogh • Review required

Python: Fix django taint sinks

Python

#3503 opened May 18, 2020 by RasmusWL • Review required

1 1

Python: Copy sanitizes default modification

Python false-positive

#3502 opened May 18, 2020 by yoff • Draft

C++: Fix struct field conflation in IR data flow

C++

#3501 opened May 18, 2020 by jbj • Review required 1.24

Python: Regexp: Handle repetions {n} (with no ,)

Python false-positive

#3500 opened May 18, 2020 by yoff • Review required

Java: Add CFG edges for Java 14 pattern-matching instanceof.

Java

#3499 opened May 18, 2020 by aschackmull • Review required

JS: make LocalObjects::isEscape aware of `yield`

Awaiting evaluation JS

#3497 opened May 18, 2020 by esbena • Review required

Data flow: Use `accessPathLimit()` in partial flow as well

#3494 opened May 18, 2020 by hvitved • Draft

Java: CWE-297 insecure JavaMail SSL configuration

Java

#3491 opened May 17, 2020 by luchua-bc • Review required

Python: Modernise

Python

#3489 opened May 15, 2020 by yoff • Draft

Add JBoss logging

Java

#3487 opened May 15, 2020 by luchua-bc • Changes requested

CSHARP: Add experimental query for tainted WebClient

#3486 opened May 15, 2020 by h3ku • Review required

Python: Add proper taint for flask.request attributes/methods

Python

#3485 opened May 15, 2020 by RasmusWL • Draft

C#: Extract indexed initializers correctly

#3484 opened May 15, 2020 by calumgrant • Review required

C++: Allow equality to block taint (security taint tracking)

C++

#3479 opened May 14, 2020 by geoffw0 • Review required

JS: Add precise data-flow steps for Promise.all

#3478 opened May 14, 2020 by erik-krogh • Review required

QL handbook: bring library path documentation up to date

#3476 opened May 14, 2020 by hmakholm • Review required

Python: Handle more escapes in regexes

Python

#3464 opened May 13, 2020 by yoff • Review required

Data flow: Track precise types during field flow

C# C++ Java

#3456 opened May 12, 2020 by hvitved • Review required

Java : add request forgery query

Java

#3454 opened May 12, 2020 by porcupineyhairs • Review required

Python: Support routed parameters in flask

Python

#3453 opened May 12, 2020 by RasmusWL • Review required

Java: CWE-918: Server side request forgery

Java

#3452 opened May 12, 2020 by random-debug • Review required

JS: Add query for shell commands constructed from library input.

Awaiting evaluation JS

#3447 opened May 11, 2020 by erik-krogh • Review required 0 of 1

Python: Format everything using `qlformat`.

Python

#3443 opened May 11, 2020 by tausbn • Approved

Java: Added a query for unsafe TLS versions

Java

#3438 opened May 10, 2020 by artem-smotrakov • Review required

Previous 1 2 3 4 Next

Previous Next

ProTip! Type g i on any issue or pull request to go back to the issue listing page.