Skip to content

/ codeql

New pull request New
134 Open 4,263 Closed
134 Open 4,263 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
C++: Implement model for _strinc and related functions
C++
#5072 opened Feb 2, 2021 by MathiasVP • Review required
C#: Move uncertain-read logic into shared SSA implementation
C#
#5071 opened Feb 2, 2021 by hvitved • Draft
Python: Add support for API graphs
Python
#5069 opened Feb 1, 2021 by tausbn • Draft 0 of 2
C#: Adjust CFG for `{Recursive,Positional,Property}PatternExpr`
C#
#5067 opened Feb 1, 2021 by hvitved • Draft
JS: add query for Express-HBS LFR
JS
#5066 opened Feb 1, 2021 by CaptainFreak • Review required
C++: Exclude custom vprintf implementations from primitiveVariadicFormatter.
C++
#5059 opened Jan 29, 2021 by geoffw0 • Review required
1
Python: Better path explanations
Python
#5057 opened Jan 29, 2021 by yoff • Draft
Python: Remove dubious local source nodes
Python
#5055 opened Jan 29, 2021 by tausbn • Review required
3
C#: Add data flow 'getARuntimeTarget' predicate to 'FunctionPointerCall'
C#
#5052 opened Jan 29, 2021 by tamasvajk • Changes requested
9
JS: support html attribute concatenations with single quotes
Awaiting evaluation JS
#5049 opened Jan 29, 2021 by erik-krogh • Approved
8
Python: dataflow, unify iterated unpacking
Python
#5047 opened Jan 28, 2021 by yoff • Changes requested
11
JS: Detect more route-handlers by adding more type-tracking steps
Awaiting evaluation JS WIP
#5045 opened Jan 28, 2021 by erik-krogh • Review required
JS: Add RemoteFlowSource.isFromClientSideUrl
JS
#5033 opened Jan 27, 2021 by asgerf • Draft
Dataflow: Add subpaths query predicate.
Java
#5032 opened Jan 27, 2021 by aschackmull • Draft
JS: Drive-by changes from Redux modelling
JS
#5019 opened Jan 26, 2021 by asgerf • Draft
CPP: add query for CWE-788 Access of memory location after the end of a buffer using strlen.
C++ documentation
#5011 opened Jan 24, 2021 by ihsinme • Review required
22
CPP: Add query for CWE-570 detect and handle memory allocation errors.
C++ documentation
#5010 opened Jan 24, 2021 by ihsinme • Review required
25
Java: Queries to detect remote source flow origins to CORS header.
Java documentation
#5008 opened Jan 24, 2021 by torque59 • Review required
23
Java: Fix NashornScriptEngine detection in ScriptEngine query
Java documentation
#5006 opened Jan 23, 2021 by p0wn4j • Review required
6
C#: Follow line directives when getting element location
C# documentation
#5005 opened Jan 22, 2021 by tamasvajk • Approved 3 of 4
6
C#: Use shared SSA implementation for `{Pre,Base}Ssa`
C#
#4998 opened Jan 21, 2021 by hvitved • Draft
Docs: Add outline for CWE coverage page
documentation
#4997 opened Jan 21, 2021 by shati-patel • Draft
Java: CWE-652: Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')
Java documentation
#4994 opened Jan 21, 2021 by haby0 • Review required
21
Java: Simple support for Ratpack HTTP Framework
Java
#4991 opened Jan 20, 2021 by JLLeitschuh • Review required
6
Java: Track taint through Spring Java bean getters on super types
Java
#4989 opened Jan 20, 2021 by lcartey • Review required
ProTip! Mix and match filters to narrow down what you’re looking for.