Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
373 Open 15,127 Closed
373 Open 15,127 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

C#: Dotnet Runtime models. C# no-change-note-required This PR does not need a change note
#8600 by michaelnebel was merged May 25, 2022 Loading…
60
[CPP-340] Refinements to FutileParams.ql etc. C++
#1136 by zlaski-semmle was merged May 1, 2019 Loading…
137
Java: Convert SensitiveApi.qll to use Models-as-Data documentation Java
#13978 by egregius313 was merged Oct 31, 2023 Loading…
99
Java: Add/improve insecure trustmanager query documentation Java no-change-note-required This PR does not need a change note ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#4879 by intrigus-lgtm was merged Jun 25, 2021 Loading…
@smowton
133
[CPP-370] Non-constant format arguments to printf and friends C++
#1251 by zlaski-semmle was merged Jul 1, 2019 Loading…
@zlaski-semmle
83
Java: Simple support for Ratpack HTTP Framework documentation Java
#4991 by JLLeitschuh was merged Oct 27, 2021 Loading…
@aschackmull
78
Java: CWE-200: Temp directory local information disclosure vulnerability documentation Java ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#4388 by JLLeitschuh was merged Feb 14, 2022 Loading…
@aschackmull
159
Java: Timing attacks while comparing results of cryptographic operations documentation Java
#6006 by artem-smotrakov was merged Aug 9, 2021 Loading…
79
Java: Unsafe deserialization with Jackson documentation Java
#5900 by artem-smotrakov was merged Aug 2, 2021 Loading…
@aschackmull
100
C++: Decompression Bombs C++ documentation external-contribution
#13560 by am0o0 was merged Sep 5, 2024 Loading…
60
Go: Decompression Bombs documentation external-contribution Go
#13553 by am0o0 was merged Mar 10, 2024 Loading…
101
Add TCP and UDP socket client taint sources C# documentation
#9415 by JarLob was merged Dec 13, 2022 Loading…
45
CPP: Add query for CWE-369: Divide By Zero. C++ documentation
#10431 by ihsinme was merged Mar 3, 2023 Loading…
43
[JAVA] Partial Path Traversal Vuln Query documentation Java ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#9742 by smehta23 was merged Aug 15, 2022 Loading…
68
Java: Add ReDoS queries documentation Java JS Python Ruby
#7723 by joefarebrother was merged May 12, 2022 Loading…
168
Python: Add Regular Expression Injection query documentation Python
#5442 by jorgectf was merged May 11, 2021 Loading…
@yoff
123
Java: Trust Boundary Violation Query documentation Java ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#13413 by egregius313 was merged Aug 18, 2023 Loading…
60
Java: Add QL support for automodel application mode Java no-change-note-required This PR does not need a change note
#13239 by tausbn was merged Jun 14, 2023 Loading…
@adityasharad
99
CPP: Add query for CWE-758: Reliance on Implementation-Defined Behavior when using malloc with zero size C++ documentation
#9088 by ihsinme was closed Oct 28, 2022 Loading…
@MathiasVP
73
Java: Add Weak Randomness Query (CWE-330/338) documentation Java ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#13608 by egregius313 was merged Dec 12, 2023 Loading…
@subatoi
71
[Java] CWE-348: Using a client-supplied IP address in a security check documentation Java
#5631 by haby0 was merged Apr 30, 2021 Loading…
@smowton
108
Java: JWT decoding without verification documentation Java
#14089 by am0o0 was merged Aug 21, 2024 Loading…
47
Java: CWE-502 Unsafe JSON deserialization with Gson, Flexjson, Jabsorb and JoddJson documentation Java
#5954 by luchua-bc was closed Oct 12, 2021 Loading…
@aschackmull
101
[CPP-387] Create a new PR against new location of introduce-libraries… C++
#1658 by zlaski-semmle was merged Aug 30, 2019 Loading…
@zlaski-semmle
79
C++: Fix more FPs on cpp/invalid-pointer-deref C++ no-change-note-required This PR does not need a change note
#12971 by MathiasVP was merged May 11, 2023 Loading…
@jketema
32
ProTip! Add no:assignee to see everything that’s not assigned.