github / codeql

Watch 51
Star 906
Fork 237

Code
Issues 109
Pull requests 90
Actions
Projects 0
Security
Insights

Code Issues 109 Pull requests 90 Projects 0 Actions Security Pulse

Labels 22 Milestones 3

New pull request New

90 Open 3,039 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

QL handbook: bring library path documentation up to date

#3476 opened May 14, 2020 by hmakholm • Review required

Java: Add taint steps for String.formatted.

Java

#3474 opened May 14, 2020 by aschackmull • Review required

Java: Extend library support for switch expressions.

Java

#3473 opened May 14, 2020 by aschackmull • Review required

JavaScript: Model extra sinks in `vm` module

#3468 opened May 14, 2020 by p0 • Approved

C++: Remove abstract keyword from `Access` and `Cast` classes

C++ depends on internal PR

#3465 opened May 13, 2020 by MathiasVP • Draft 2 of 2

Python: Handle more escapes in regexes

Python

#3464 opened May 13, 2020 by yoff • Review required

Python: __bool__ does not raise TypeError by default

Python

#3460 opened May 13, 2020 by yoff • Changes requested

Data flow: Track precise types during field flow

C# C++ Java

#3456 opened May 12, 2020 by hvitved • Review required

Java : add request forgery query

Java

#3454 opened May 12, 2020 by porcupineyhairs • Review required

Python: Support routed parameters in flask

Python

#3453 opened May 12, 2020 by RasmusWL • Review required

Java: CWE-918: Server side request forgery

Java

#3452 opened May 12, 2020 by random-debug • Review required

JS: Add query for shell commands constructed from library input.

Awaiting evaluation JS

#3447 opened May 11, 2020 by erik-krogh • Draft 0 of 1

Python: Format everything using `qlformat`.

Python

#3443 opened May 11, 2020 by tausbn • Approved

Java: Added a query for unsafe TLS versions

Java

#3438 opened May 10, 2020 by artem-smotrakov • Review required

Java: Added a query for disabled certificate revocation checking

Java

#3436 opened May 9, 2020 by artem-smotrakov • Review required

JS: Recognize Express param value callback as RemoteFlowSource

Awaiting evaluation JS

#3424 opened May 6, 2020 by asgerf • Review required

CVE 2020 1967

C++

#3423 opened May 6, 2020 by raulgarciamsft • Review required

C++: Add reverse reads to IR field flow

C++ WIP

#3419 opened May 5, 2020 by MathiasVP • Draft

JS: add MembershipTests.qll

Awaiting evaluation JS

#3415 opened May 5, 2020 by esbena • Review required

JS: new query for Unsafe expansion of shorthand HTML tag

#3408 opened May 5, 2020 by esbena • Approved

Python: add BoundMethodValue (round 2)

Python

#3407 opened May 5, 2020 by RasmusWL • Draft 1 of 2

Python: Various performance improvements.

Awaiting evaluation Python

#3402 opened May 4, 2020 by tausbn • Draft

Python : Add query to detect Server Side Template Injection

Python

#3396 opened May 3, 2020 by porcupineyhairs • Review required

JS: recognize .split("?")[0] in more cases for URL redirection

Awaiting evaluation JS

#3391 opened May 1, 2020 by erik-krogh • Review required

WIP JS: Add jump-to-definition IDE queries

#3390 opened May 1, 2020 by jcreedcmu • Review required

Previous 1 2 3 4 Next

Previous Next

ProTip! Follow long discussions with comments:>50.