Skip to content

/ codeql

New pull request New
145 Open 4,803 Closed
145 Open 4,803 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Java: Unsafe RMI deserialization
Java documentation
#5818 opened May 1, 2021 by artem-smotrakov • Review required
Java: Avoid comparing result of toString()
Java
#5817 opened May 1, 2021 by Marcono1234 • Review required
3
Java: Replace usage of toString() for Javadoc queries; add more Javadoc tags
Java
#5815 opened Apr 30, 2021 by Marcono1234 • Review required
[Java] Add taint tracking through Jackson deserialization
Java
#5814 opened Apr 30, 2021 by JLLeitschuh • Review required
2
Add React Native to JavaScript frameworks docs
documentation
#5812 opened Apr 30, 2021 by mario-campos • Review required
Java: Add query - insecure environment configuration during JMX/RMI server init
Java documentation
#5811 opened Apr 30, 2021 by timoles • Review required
18
C#: Use invariant culture in the extractor
C#
#5810 opened Apr 30, 2021 by tamasvajk • Review required
Add heuristic query identifying probable SQL injection sinks
Java
#5806 opened Apr 29, 2021 by smowton • Draft
1
C++: Add nomagic to getUnspecifiedType
C++ no-change-note-required
#5803 opened Apr 29, 2021 by MathiasVP • Approved
1
Java: CWE-094 Rhino code injection
Java documentation
#5802 opened Apr 29, 2021 by luchua-bc • Review required
3
Python: Various MRO performance fixes
Python
#5799 opened Apr 28, 2021 by tausbn • Draft
1
Java: Add synthetic fields; model Commons Lang's MutableObject type
Java
#5796 opened Apr 28, 2021 by smowton • Review required
1
C#: Extract implicit constructor initializer calls
C#
#5795 opened Apr 28, 2021 by hvitved • Draft
JS: Generalize and expand RxJS pipe support
JS no-change-note-required
#5794 opened Apr 28, 2021 by erik-krogh • Review required
Python: Minor fix to Django RawSQL QLDoc
Python no-change-note-required
#5793 opened Apr 28, 2021 by RasmusWL • Review required
Autobuilder: add some logging in VcVars selection
C#
#5792 opened Apr 27, 2021 by rdmarsh2 • Draft
Java: Override toString() for statements
Java no-change-note-required
#5788 opened Apr 27, 2021 by Marcono1234 • Review required
11
CWE-1004: Sensitive cookie without HttpOnly
JS documentation
#5785 opened Apr 27, 2021 by edvraa • Changes requested
15
Java: Denial of Service due to decoding of untrusted input
Java
#5776 opened Apr 26, 2021 by porcupineyhairs • Review required
6
Java: Promote XPath Injection query from experimental
Java documentation ready-for-docs-review
#5774 opened Apr 26, 2021 by atorralba • Review required
44
Data flow: Cache most language-dependent predicates
C# C++ Java Python no-change-note-required
#5773 opened Apr 26, 2021 by hvitved • Review required
4
Add models for Apache Commons Lang's tuple types
Java
#5772 opened Apr 26, 2021 by smowton • Review required
9
JS: Add unsafe-html-construction query
JS documentation
#5769 opened Apr 26, 2021 by erik-krogh • Draft 2 of 3
JS: cache more predicates
JS no-change-note-required
#5768 opened Apr 26, 2021 by erik-krogh • Review required
1
CPP: Add query for CWE-1126: Declaration of Variable with Unnecessarily Wide Scope
C++ documentation
#5767 opened Apr 25, 2021 by ihsinme • Review required
8
ProTip! Follow long discussions with comments:>50.