github / codeql Public

Notifications
Star 3.4k
Fork 723

Code
Issues 330
Pull requests 160
Discussions
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Discussions
Actions
Projects
Security
Insights

Labels 34 Milestones 8

New pull request New

Clear current search query, filters, and sorts

52 Open 920 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels

or ⇧ + click/return for logical OR

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Java: Deprecate PrimitiveType.getADefaultValue()

documentation Java

#6796 opened Oct 2, 2021 by Marcono1234 • Review required

C++: Improvements to cpp/improper-null-termination

C++ documentation

#6794 opened Oct 1, 2021 by geoffw0 • Review required

1 task

Python: Model FastAPI

documentation Python

#6782 opened Sep 30, 2021 by RasmusWL • Draft

JS: Move LDAP injection out of experimental

documentation JS

#6781 opened Sep 30, 2021 by erik-krogh • Review required

Java: CWE-927 - Query to detect the use of implicit PendingIntents

documentation Java

#6779 opened Sep 30, 2021 by atorralba • Review required

Python: Model asyncpg

documentation Python

#6776 opened Sep 29, 2021 by yoff • Changes requested

Java: Big Decimal DOS

documentation Java

#6730 opened Sep 22, 2021 by tonghuaroot • Review required

C++: Exclusion rules for system macros

C++ documentation

#6723 opened Sep 21, 2021 by jbj • Draft

Java: CWE-400 - Query to detect uncontrolled thread resource consumption

documentation Java

#6717 opened Sep 20, 2021 by luchua-bc • Review required

Yet another SSRF query for Javascript

documentation JS

#6714 opened Sep 17, 2021 by valeria-meli • Review required

CPP: Add query for CWE-1041 Use of Redundant Code

C++ documentation

#6710 opened Sep 16, 2021 by ihsinme • Review required

Python: Promote py/regex-injection

documentation Python

#6693 opened Sep 14, 2021 by yoff • Changes requested

Java: Promote android sensitive broadcast query

documentation Java

#6599 opened Sep 3, 2021 by joefarebrother • Review required

Java: Create new query Cleartext storage of sensitive information in Android filesystem

documentation Java

#6576 opened Aug 31, 2021 by atorralba • Review required

Java: CWE-200 - Query to detect exposure of sensitive information from android file intent

documentation Java

#6567 opened Aug 29, 2021 by luchua-bc • Review required

JS/Python: add a bad-tag-filter query for Python and JavaScript

documentation JS Python

#6561 opened Aug 26, 2021 by erik-krogh • Review required

Java: Create new query Cleartext storage of sensitive information in Android databases

documentation Java

#6492 opened Aug 17, 2021 by atorralba • Review required

Java: Promote Cleartext storage of sensitive information using SharedPreferences from experimental

documentation Java

#6468 opened Aug 11, 2021 by atorralba • Review required

Java: add Gson support to unsafe-deserialization query

documentation Java

#6463 opened Aug 10, 2021 by smowton • Review required

Java: An experimental query for ignored hostname verification

documentation Java

#6443 opened Aug 8, 2021 by artem-smotrakov • Review required

Java: Create new Android Intent Redirection query

documentation Java ready-for-doc-review

#6397 opened Aug 2, 2021 by atorralba • Review required

Python: Add missing 'secure' flag in response cookies query

documentation Python

#6360 opened Jul 25, 2021 by jorgectf • Draft

Java: Introduce Freemarker for SSTI queries

documentation Java

#6320 opened Jul 18, 2021 by japroc • Review required

[Java] CWE-089 MyBatis Mapper Sql Injection

documentation Java

#6319 opened Jul 18, 2021 by haby0 • Review required

Java: CWE-552 Query to detect configuration file/source code exposure from unsafe request dispatcher

documentation Java

#6251 opened Jul 11, 2021 by luchua-bc • Review required

Previous 1 2 3 Next

Previous Next

ProTip! Add no:assignee to see everything that’s not assigned.