155 Pull requests merged by 41 people

• Update codeql-cli-2.20.4.rst

  #18953 merged Mar 7, 2025

• Move UnversionedImmutableAction.ql to experimental

  #18945 merged Mar 7, 2025

• Update codeql-cli-2.20.4.rst

  #18951 merged Mar 7, 2025

• Ssa: Extend consistency checks and reduce phi read nodes

  #18941 merged Mar 7, 2025

• Change note creation script uses EDITOR environment variable

  #18739 merged Mar 7, 2025

• C++: Improve query description and fix alignment of the text

  #18928 merged Mar 7, 2025

• C#: Handle some BMN garbage types.

  #18894 merged Mar 7, 2025

• Changedocs for 2.20.6

  #18944 merged Mar 6, 2025

• Rust: Fix bad joins

  #18937 merged Mar 6, 2025

• Go: Support more dependency managers in IsGolangVendorDirectory

  #18929 merged Mar 6, 2025

• SSA: Replace the Guards interface in the SSA data flow integration.

  #18934 merged Mar 6, 2025

• C#: Fewer alerts in cs/useless-if-statement.

  #18935 merged Mar 6, 2025

• Python: Add metrics query for type annotations

  #18448 merged Mar 6, 2025

• Bump the extractor-dependencies group in /go/extractor with 2 updates

  #18938 merged Mar 6, 2025

• [CWE-925] Intent verification is only needed on non-empty onReceive methods.

  #18907 merged Mar 6, 2025

• Python: Include py/not-named-self and py/not-named-cls in the CCR suite

  #18936 merged Mar 6, 2025

• Go: Do not track taint into a sync.Map via the key of a key-value pair

  #18920 merged Mar 6, 2025

• C++: Change countNumberOfBranchesUsingParameter to match qldoc closer.

  #18908 merged Mar 5, 2025

• Ssa: Update qltests including consistency checks

  #18869 merged Mar 5, 2025

• C++: Update template test to also output the value of template arguments

  #18923 merged Mar 4, 2025

• Mergeback codeql-cli-2.20.6 to rc/3.17

  #18925 merged Mar 4, 2025

• Upgrade cargo dependencies

  #18789 merged Mar 4, 2025

• Update supported Java version

  #18917 merged Mar 4, 2025

• Rust: Move AstConsistency.qll into internal

  #18919 merged Mar 4, 2025

• Rust: Exclude functions without canonical path from model generation

  #18922 merged Mar 4, 2025

• C++ query to extract the number of errors due to include file resolution failure

  #18914 merged Mar 4, 2025

• Java: handle lock state check stored in variable for java/unreleased-lock

  #18900 merged Mar 4, 2025

• Rust: Allow SSA and some data flow for mutable borrows

  #18872 merged Mar 4, 2025

• Add CodeQL recommendation against Path.Combine

  #18865 merged Mar 4, 2025

• Post-release preparation for codeql-cli-2.20.6

  #18912 merged Mar 3, 2025

• Release preparation for version 2.20.6

  #18911 merged Mar 3, 2025

• C++: Improve and promote cpp/overflow-buffer

  #18837 merged Mar 3, 2025

• C#: Pin .NET for the integration test

  #18904 merged Mar 3, 2025

• Set the executable bit on the scripts in the Actions extractor

  #18888 merged Mar 3, 2025

• Rust: Model pointer read and write functions

  #18896 merged Mar 3, 2025

• Data flow: Improve doc for defaultImplicitTaintRead.

  #18895 merged Feb 28, 2025

• Java: Update test expectations for JDK24 upgrade

  #18861 merged Feb 28, 2025

• Update CSV framework coverage reports

  #18891 merged Feb 28, 2025

• C#: Pin .NET for the integration test standalone_dependencies_nuget_c…

  #18893 merged Feb 28, 2025

• Rust: fix dataflow test failure by pinning the toolchain version

  #18881 merged Feb 28, 2025

• Go: Add .gitignore for artifacts of make test

  #18886 merged Feb 27, 2025

• Move list of immutable actions into internal model pack for now.

  #18887 merged Feb 27, 2025

• Go: Add database sources for the gorqlite package

  #18863 merged Feb 27, 2025

• Go: Add belated change note for go 1.24

  #18885 merged Feb 27, 2025

• Go: Use getLocation instead of hasLocationInfo

  #18883 merged Feb 27, 2025

• Java: Simplify interpretOutput

  #18874 merged Feb 27, 2025

• Rust: Model Result.ok and Result.err.

  #18777 merged Feb 27, 2025

• Test: Ensure total ranking order to avoid ambiguous results

  #18864 merged Feb 27, 2025

• Go: Document support for Go 1.24

  #18870 merged Feb 26, 2025

• Go: Slightly adjust some location info to match locations that are in the database

  #18868 merged Feb 26, 2025

• Update CSV framework coverage reports

  #18839 merged Feb 26, 2025

• Don't run Go tests on documentation changes

  #18867 merged Feb 26, 2025

• Rust: Add generated models for standard libraries including core

  #18787 merged Feb 26, 2025

• Test: Add support for RelatedLocation tag and use in a JS query

  #18810 merged Feb 25, 2025

• Add queries to C# CCR suite

  #18835 merged Feb 25, 2025

• JS: Support 'response' threat model and @tanstack/react-query

  #18834 merged Feb 25, 2025

• Rust: Update some inline expectation comments

  #18856 merged Feb 25, 2025

• C++: Fix join-order problem with isBefore

  #18859 merged Feb 25, 2025

• Ssa: Refactor the data flow integration module

  #18857 merged Feb 25, 2025

• Java: Switch BaseSSA to use shared SSA lib.

  #18824 merged Feb 25, 2025

• Java: StaticInitializationVector with postprocess

  #18848 merged Feb 25, 2025

• Rust: Test and model some string and iterator methods

  #18701 merged Feb 25, 2025

• C#: Proper handling of value tuples in cs/call-to-object-tostring.

  #18849 merged Feb 25, 2025

• Java: Add XSS Sanitizer for HttpServletResponse.setContentType with safe values

  #18607 merged Feb 24, 2025

• Go: Improve bad join order in guardingCall

  #18831 merged Feb 24, 2025

• Fix typo in shared DataFlowImplConsistency.qll

  #18851 merged Feb 24, 2025

• CPP: Prevent forced bad join order which is saved by context.

  #18828 merged Feb 24, 2025

• Rust: fix <X as Y> path extraction

  #18847 merged Feb 24, 2025

• Rust: expose more rust-analyzer config knobs

  #18756 merged Feb 24, 2025

• Rust: strengthen linting script

  #18822 merged Feb 24, 2025

• Rust: More path resolution improvements

  #18823 merged Feb 24, 2025

• Add changelog for CodeQL CLI version 2.20.5

  #18833 merged Feb 24, 2025

• C++: Expand qldoc and tests for cpp/command-line-injection

  #18827 merged Feb 24, 2025

• Go: Fix buggy FindAllFilesWithName implementation

  #17900 merged Feb 22, 2025

• Java: Add tests for XML and Java extraction with GBK charset

  #18554 merged Feb 21, 2025

• Go: Fix bad join order in comparesFirstCharacter

  #18826 merged Feb 21, 2025

• Go: database local sources for MongoDB

  #18493 merged Feb 21, 2025

• Rust: Remove nonsentical no-match CFG edges

  #18820 merged Feb 21, 2025

• Coadaflorin/csharp changelog clean

  #18832 merged Feb 21, 2025

• Ssa: Refactor shared SSA in preparation for eliminating phi-read definitions

  #18819 merged Feb 21, 2025

• Fix table alignment in supported languages article

  #18809 merged Feb 20, 2025

• Rust: add licensing information to crates and extractor pack

  #18821 merged Feb 20, 2025

• Regularise extractor pack licenses to all cite the MIT license that covers the whole CodeQL repository

  #18829 merged Feb 20, 2025

• Update license; remove redundant Go qlpack license.

  #18699 merged Feb 20, 2025

• Rust: Generate sources and sinks

  #18784 merged Feb 20, 2025

• CFG: Prune ConditionalCompletionSplitting for unnecessary splits

  #18799 merged Feb 20, 2025

• JS: Resolve calls downward in class hierarchy

  #18783 merged Feb 20, 2025

• ruby: include rb/database-query-in-loop in the CCR suite

  #18730 merged Feb 19, 2025

• Rust: Path resolution for inherited associated items

  #18808 merged Feb 19, 2025

• Java: update java/spring-disabled-csrf-protection QHelp

  #18692 merged Feb 19, 2025

• Update CSV framework coverage reports

  #18812 merged Feb 19, 2025

• Python: upgrade clap

  #18797 merged Feb 19, 2025

• Rust ref pattern

  #18754 merged Feb 19, 2025

• Bazel: Add --test_output all

  #18814 merged Feb 19, 2025

• JS: Extract TS snippets with no tsconfig.json file

  #18807 merged Feb 19, 2025

• Rust: support glob members in workspaces

  #18802 merged Feb 19, 2025

• JS: Do not taint whole array when storing into ArrayElement

  #18790 merged Feb 19, 2025

• JS: Add result.download to Express as Path Traversal Sink

  #18749 merged Feb 19, 2025

• Updata Java CCR suite

  #18811 merged Feb 19, 2025

• Java: File constructor path sanitizer

  #18504 merged Feb 18, 2025

• Sanitize path when generating MaD files

  #18800 merged Feb 18, 2025

• Post-release preparation for codeql-cli-2.20.5

  #18804 merged Feb 17, 2025

• Release preparation for version 2.20.5

  #18803 merged Feb 17, 2025

• JS: Add support for the regex V flag

  #18794 merged Feb 17, 2025

• Rust/Ruby: Minor SSA cleanup.

  #18786 merged Feb 17, 2025

• Rust: Adjust argument position when call expression is for method

  #18772 merged Feb 17, 2025

• Ruby: Query for database calls in a loop

  #18304 merged Feb 17, 2025

• Update CSV framework coverage reports

  #18792 merged Feb 17, 2025

• JS: Provide more precise related locations

  #18740 merged Feb 17, 2025

• QL4QL: Add query suggesting use of inline test expectations

  #18767 merged Feb 17, 2025

• Python: Modernize py/not-named-self and py/not-named-cls queries

  #18599 merged Feb 17, 2025

• JS: Migrate model of URLSearchParams

  #18768 merged Feb 17, 2025

• Fix docker SHA false positive

  #18785 merged Feb 14, 2025

• Rust/Swift: add integration tests checking env dumping

  #18567 merged Feb 14, 2025

• C++: Clean up some stuff in SsaInternals

  #18773 merged Feb 14, 2025

• Go: Add Tainted Path sanitizers

  #17759 merged Feb 14, 2025

• Go: Rename "named type" to "defined type"

  #18489 merged Feb 14, 2025

• Go: Add more modeled frameworks to docs

  #18766 merged Feb 14, 2025

• Rust: use tracing/tracing-subscriber for logging

  #18608 merged Feb 14, 2025

• Go: Print diff when dbscheme upgrade fails

  #18774 merged Feb 13, 2025

• Rust extractors: Normalize drive letter paths with a trailing /

  #18770 merged Feb 13, 2025

• Rust: Use Field MaD token instead of Variant, Struct, Tuple

  #18769 merged Feb 13, 2025

• C#: Update the documentation on supported C# language versions and fr…

  #18764 merged Feb 13, 2025

• Added missing "GOOD" and "BAD" to some examples

  #18645 merged Feb 13, 2025

• Update CSV framework coverage reports

  #18761 merged Feb 13, 2025

• Rust: Implement TypeParam.to(Abbreviated)String

  #18755 merged Feb 13, 2025

• Rust: avoid panic from line_index crate

  #18759 merged Feb 12, 2025

• Rust: Add initial RuSQLite support

  #18577 merged Feb 12, 2025

• Rust: Model some sources for HTTP

  #18671 merged Feb 12, 2025

• Rust: Fix Windows integration test.

  #18753 merged Feb 12, 2025

• Go: Add models for standard library updates in Go 1.24

  #18454 merged Feb 12, 2025

• Go: Support 1.24

  #18306 merged Feb 12, 2025

• Test: Support arbitrary locations in inline test post-processor

  #18735 merged Feb 12, 2025

• C#: update MaD for HttpRequestMessage and UriBuilder

  #18694 merged Feb 12, 2025

• Rust: Add generated flow summaries for Option

  #18743 merged Feb 12, 2025

• Update CSV framework coverage reports

  #18747 merged Feb 12, 2025

• Rust: Tweak toString on identity pattern

  #18741 merged Feb 12, 2025

• Java: add CSRF query

  #18288 merged Feb 11, 2025

• JS: Model query-string parsers that strip off a leading '#' or '?'

  #18733 merged Feb 11, 2025

• C#: Update .NET 9 generated models.

  #18717 merged Feb 11, 2025

• Python: Add tests for functional-like programming

  #17765 merged Feb 11, 2025

• Java: precise diff-informed NumericCastTainted

  #18737 merged Feb 11, 2025

• Rust: Basic support for future content and .await

  #18685 merged Feb 11, 2025

• TreeSitter extractors: log fewer lines

  #18713 merged Feb 11, 2025

• Rust: Handle writes to references and add encoding of reference content

  #18714 merged Feb 11, 2025

• Shared: Use edge dominance terminology in basic block library

  #18696 merged Feb 11, 2025

• C#: Add the standard library to the list of references for debugging …

  #18734 merged Feb 11, 2025

• Python: enable diff-informed data flow queries

  #18341 merged Feb 11, 2025

• Bazel: update rules_rust

  #18710 merged Feb 11, 2025

• Bump golang.org/x/tools from 0.29.0 to 0.30.0 in /go/extractor in the extractor-dependencies group

  #18732 merged Feb 11, 2025

• Java: Adopt shared SSA library

  #16900 merged Feb 11, 2025

• Rust: Model namespaces in path resolution

  #18728 merged Feb 11, 2025

• Ssa: Deprecate the unused getALastRead predicate.

  #18729 merged Feb 11, 2025

• Add CCR suite to query list

  #18708 merged Feb 10, 2025

• Rust: Add Database Sources + tokio-postgres support

  #18712 merged Feb 10, 2025

41 Pull requests opened by 25 people

• Fix the broken reference

  #18722 opened Feb 9, 2025

• Python: Don't prune any `MatchLiteralPattern`s

  #18738 opened Feb 11, 2025

• Add actions to codeql analysis workflow

  #18742 opened Feb 11, 2025

• Rust: Re-categorize tokio-postgres sources as remote.

  #18752 opened Feb 12, 2025

• C#: Basic property pattern flow.

  #18781 opened Feb 14, 2025

• Java: add non-incremental tag to telemetry queries

  #18788 opened Feb 14, 2025

• Java: Promote Spring Boot Actuators query from experimental

  #18793 opened Feb 16, 2025

• JS: upgrade TypeScript to 5.8

  #18798 opened Feb 17, 2025

• Rust: add flag to turn off extractor path resolution

  #18813 opened Feb 19, 2025

• Java: Add integration test for failure to download a particular Maven version

  #18836 opened Feb 21, 2025

• Actions: Sequester issue_comment triggered untrusted checkout from other triggers

  #18838 opened Feb 21, 2025

• [Draft] Python: Modernize File Not Always Closed query

  #18845 opened Feb 24, 2025

• C#: Automatically use configured private registry feeds

  #18850 opened Feb 24, 2025

• Python: Add more documentation in regards to SSRF

  #18855 opened Feb 25, 2025

• JS: React-relay useFragment support

  #18858 opened Feb 25, 2025

• WIP: JS: Remove legacy `DOM` sinks

  #18860 opened Feb 25, 2025

• C#: Add cs/call-to-object-tostring to the CCR query suite.

  #18866 opened Feb 26, 2025

• Python: Move min/maxParameter methods to `Function` class

  #18871 opened Feb 26, 2025

• Bump chrono from 0.4.38 to 0.4.40 in /ql

  #18876 opened Feb 27, 2025

• JS: Sharpen up EnumerationRegExp

  #18892 opened Feb 28, 2025

• Rust: DO NOT MERGE test turning off path resolution

  #18897 opened Feb 28, 2025

• JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing

  #18899 opened Feb 28, 2025

• Go: Add `database` source models for the `squirrel` package

  #18902 opened Mar 3, 2025

• C#: enable buildless mode

  #18906 opened Mar 3, 2025

• Go: Add `database` source models for the `github.com/couchbase/gocb` package

  #18913 opened Mar 3, 2025

• Rust: tweak qltest logs

  #18918 opened Mar 4, 2025

• Python: Add support for forward references in unused var query

  #18921 opened Mar 4, 2025

• Ruby: Avoid a forced CP.

  #18927 opened Mar 4, 2025

• C#: Blazor: Add non-local jump node for parameter passing

  #18930 opened Mar 5, 2025

• C++: Update expected test results and compiler version documentation after frontend update

  #18931 opened Mar 5, 2025

• C#: Special handling of unknown types in `isMatchingConstant`.

  #18932 opened Mar 5, 2025

• Go: Add test for FP in `go/unhandled-writable-file-close`

  #18940 opened Mar 6, 2025

• C++: Refactor SSA usage in data flow.

  #18942 opened Mar 6, 2025

• Rust: new query rust/hardcoded-crytographic-value

  #18943 opened Mar 6, 2025

• Rust: Add regular expression injection query

  #18946 opened Mar 7, 2025

• Java: Add new quality query to detect empty methods

  #18947 opened Mar 7, 2025

• C#: cs/local-not-disposed on Task

  #18950 opened Mar 7, 2025

• Rust: Improve rust/unused-variable and rust/unused-value

  #18952 opened Mar 7, 2025

• C++: Share indirect dataflow nodes across `CopyValue` instructions

  #18955 opened Mar 7, 2025

• Python: Refactor special method query

  #18956 opened Mar 7, 2025

• C#: Blazor: Support string literals as property names in jump nodes

  #18957 opened Mar 8, 2025

26 Issues closed by 15 people

• CodeQl Cli - The process cannot access the file '<path>\build-tracer.log' because it is being used by another process.

  #18924 closed Mar 7, 2025

• Codeql package installation issue

  #18939 closed Mar 6, 2025

• How to Calculate LOC for BlockStmt

  #18915 closed Mar 4, 2025

• [cpp] extractor crashed when creating database

  #16449 closed Mar 3, 2025

• Failure to create CodeQL database with latest Visual Studio (17.8.1)

  #14927 closed Mar 3, 2025

• General issue

  #18363 closed Mar 3, 2025

• How to use my own modified version of codeql core library

  #18890 closed Mar 3, 2025

• Idk

  #18889 closed Feb 28, 2025

• Erica

  #18898 closed Feb 28, 2025

• [Actions] Unpinned actions in same organization or same enterprise incorrectly trigger actions/unpinned-tag

  #18316 closed Feb 28, 2025

• Autobuild Go detects go.work files in vendored directories

  #17893 closed Feb 24, 2025

• Not finding SQL Vulnerabilities

  #18184 closed Feb 23, 2025

• CodeQL database creation loses AST information when processing Vue files with `<script setup lang="ts">`

  #18801 closed Feb 19, 2025

• Something wrong on "DataFlow::Global<xxx>"

  #18795 closed Feb 17, 2025

• Out of bounds: scanf check

  #18779 closed Feb 17, 2025

• Is it possible to track clone value

  #18760 closed Feb 17, 2025

• Simple JS CodeInjection vulnerability no longer caught in latest release.

  #18757 closed Feb 17, 2025

• False positive for GitHub action using a Docker image pinned by sha256

  #18782 closed Feb 14, 2025

• Start tracking malloc

  #18771 closed Feb 14, 2025

• Kotlin support confusion

  #18763 closed Feb 13, 2025

• Creating universal database

  #18758 closed Feb 12, 2025

• Can I use isAdditionalFlowStep() to add in specific call edges for dataflow in JavaScript?

  #18724 closed Feb 12, 2025

• BUILD SUCCESSFUL but got an error of codeql when create databse

  #18750 closed Feb 12, 2025

• CodeQL cannot resolve some classes and methods

  #18648 closed Feb 11, 2025

• Repo for C projects with CodeQL (ffmpeg)

  #18744 closed Feb 11, 2025

• [Javascript] Missing one URL Redirection vulnerability?

  #18731 closed Feb 11, 2025

24 Issues opened by 23 people

• False positive on Static files

  #18948 opened Mar 7, 2025

• Inconsistency between the sarif file and information from vscode codeql panel

  #18933 opened Mar 5, 2025

• False positive in Go / Golang context when logging using %T

  #18926 opened Mar 4, 2025

• Go: False positive when use sync.Map

  #18916 opened Mar 4, 2025

• Python: False Positive on Global Type Variable

  #18910 opened Mar 3, 2025

• Allow multiple excludes in Java extractor

  #18905 opened Mar 3, 2025

• How to use CodeQL to scan the sink of code（only sink）

  #18862 opened Feb 26, 2025

• JavaScript: false positive with unicode sets for character classes that contain brackets

  #18854 opened Feb 24, 2025

• C: preprocessor branches truncated to first line

  #18842 opened Feb 23, 2025

• Path-problem query fails CSV export with "Expected at least two result patterns" error in CLI (Python)

  #18841 opened Feb 22, 2025

• Remediation advice in SSRF could be more broadly focused

  #18815 opened Feb 19, 2025

• C: CodeQL seems to be confused by __attribute__((weak))

  #18806 opened Feb 17, 2025

• Whether the codeql result contains function call chain information.

  #18796 opened Feb 17, 2025

• Use After Free: Tracking alias

  #18791 opened Feb 14, 2025

• CodeQL scanning of transitive private repository dependency

  #18780 opened Feb 14, 2025

• Processing Vue w/TS files, CodeQL hits maximum call stack size exceeded

  #18778 opened Feb 13, 2025

• [Python] QHelp references old-ish python 2 documentation

  #18775 opened Feb 13, 2025

• Javascript Taint Tracking

  #18765 opened Feb 13, 2025

• Adding functions from typescript lib files to analysis

  #18748 opened Feb 12, 2025

• Alert is removed, incorrect alert is marked as fixed, and all other alerts jump to other links

  #18745 opened Feb 11, 2025

• JS/TS Analyse 2.20.4 Runs Extremely Slow

  #18736 opened Feb 11, 2025

• False Negative - Python `abc.ABC` makes method's `getACall` unavailable

  #18725 opened Feb 10, 2025

• Get full string for exported JavaScript results

  #18723 opened Feb 10, 2025

• False positive (javascript): "Invalid regular expression flag" for v flag

  #18721 opened Feb 9, 2025

22 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• JS: Update test suite to use post-processed inline expectations

  #18670 commented on Mar 5, 2025 • 29 new comments

• Rust: Implement basic type inference in QL

  #18632 commented on Mar 7, 2025 • 29 new comments

• Rust: extract crate graph

  #18228 commented on Mar 7, 2025 • 9 new comments

• Java: path sanitizer for `replace`, `replaceAll`, and `matches`

  #18646 commented on Mar 6, 2025 • 3 new comments

• C++: Iterator derefs are partial writes

  #18674 commented on Feb 20, 2025 • 0 new comments

• Go: Only use `EmitInvalidToolchainVersion` if installed toolchain is `>=1.21 && <1.23`

  #18499 commented on Feb 19, 2025 • 0 new comments

• JS: Support for ECMAScript 2024 `v` Flag Intersection

  #18055 commented on Feb 28, 2025 • 0 new comments

• Go: `database` local source models

  #17905 commented on Mar 3, 2025 • 0 new comments

• Java: make all code-scanning queries diff-informed

  #17846 commented on Feb 24, 2025 • 0 new comments

• Go: Switch from def-use flow to use-use flow

  #14751 commented on Mar 7, 2025 • 0 new comments

• codeql pack publish fails with confusing SocketException when token lacks permission

  #14104 commented on Mar 6, 2025 • 0 new comments

• Weak Hashing findings vanished from 1.1.11 ruleset?

  #18518 commented on Mar 6, 2025 • 0 new comments

• Java: `getNumberOfCommentLines` and `getNumberOfLinesOfCode` should only exist for supported classes

  #10199 commented on Mar 4, 2025 • 0 new comments

• Error downloading/installing codeql cpp-queries package

  #14492 commented on Mar 3, 2025 • 0 new comments

• C++: Total number of baseline files limit

  #17743 commented on Feb 25, 2025 • 0 new comments

• Why doesn't CodeQL support auditing PHP

  #12376 commented on Feb 22, 2025 • 0 new comments

• Swift: Xcode 16 - Library not loaded: @rpath/libSwiftSyntax.dylib

  #17819 commented on Feb 21, 2025 • 0 new comments

• LGTM.com - false positive when using imports with TYPE_CHECKING

  #4258 commented on Feb 17, 2025 • 0 new comments

• CodeQL False Negative - Protototype Pollution

  #18665 commented on Feb 17, 2025 • 0 new comments

• CodeQL is missing an inline mechanism to suppress warnings

  #11427 commented on Feb 11, 2025 • 0 new comments

• C++ extraction aborted for compiler invocation when using std::format

  #18244 commented on Feb 10, 2025 • 0 new comments

• result abbreviation

  #9890 commented on Feb 10, 2025 • 0 new comments