github / codeql

Watch 66
Star 1.4k
Fork 368

Code
Issues 174
Pull requests 107
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 25 Milestones 4

New pull request New

107 Open 3,634 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

CWE-327 BrokenCryptoAlgorithm recommendation to AES instead of Blowfish

Python documentation

#4256 opened Sep 13, 2020 by fatenhealy • Review required

Increase insufficient key size value from 1024 to 2048

C# documentation

#4255 opened Sep 13, 2020 by fatenhealy • Review required

JS: Bump extractor version string

#4254 opened Sep 12, 2020 by asgerf • Approved

C++: Model more stringstream features

C++

#4253 opened Sep 11, 2020 by geoffw0 • Review required

C++: SimpleRangeAnalysis: Always normalize bounds after a computation

C++

#4252 opened Sep 11, 2020 by jbj • Approved

Python: Implement `BarrierGuard`

Python

#4251 opened Sep 11, 2020 by yoff • Review required

Test: Simple change to Java folder

Java documentation

#4248 opened Sep 10, 2020 by adityasharad • Draft

JS: add support for re-exports using the spread operator for NodeJS exports

#4247 opened Sep 10, 2020 by erik-krogh • Draft

Java: Minor fixup for SSA AdjacentUsesImpl::varBlockReaches

Java

#4246 opened Sep 10, 2020 by RasmusWL • Review required

Python: Add dataflow tests for dynamic tuple creation

Python

#4245 opened Sep 10, 2020 by RasmusWL • Review required

JS: Fix Bad join orders in UnsafeJQueryPlugin

#4244 opened Sep 10, 2020 by erik-krogh • Approved

JS: Extra taint-steps to support CVE

JS documentation

#4231 opened Sep 8, 2020 by erik-krogh • Approved

C++: (WIP) Replace taint through `UnknownType` with `ArrayContent` dataflow

C++ WIP

#4230 opened Sep 8, 2020 by MathiasVP • Draft

Python: Add missing 1.25 change notes

Python documentation

#4226 opened Sep 8, 2020 by RasmusWL • Approved 1.25

[Java] Add QL for detecting Spring View Manipulation Vulnerabilities.

Java

#4214 opened Sep 5, 2020 by porcupineyhairs • Review required

C#: Implement support for path transformers

#4212 opened Sep 4, 2020 by hvitved • Approved

C#: range analysis

C# Java

#4194 opened Sep 2, 2020 by tamasvajk • Draft

C#: Sign analysis

C# Java

#4193 opened Sep 2, 2020 by tamasvajk • Review required

Python: Dataflow, Test that `pointsTo` implies data flow

Python

#4174 opened Sep 1, 2020 by yoff • Changes requested

Bump diff from 3.4.0 to 3.5.0 in /javascript/extractor/lib/typescript

dependencies

#4164 opened Aug 28, 2020 by dependabot bot • Review required

Bump js-yaml from 3.10.0 to 3.14.0 in /javascript/extractor/lib/typescript

dependencies

#4163 opened Aug 28, 2020 by dependabot bot • Review required

C++: Use IR alias analysis for field flow

C# C++

#4142 opened Aug 26, 2020 by MathiasVP • Review required

Update tests for extractor changes with ctors

C++ depends on internal PR

#4140 opened Aug 26, 2020 by matt-gretton-dann • Review required

C#: Skip `foreach` loop bodies in the CFG when the iteration expression is empty

#4139 opened Aug 26, 2020 by hvitved • Review required

C++: Output iterators in AST taint tracking

C++

#4135 opened Aug 25, 2020 by rdmarsh2 • Review required

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Updated in the last three days: updated:>2020-09-10.