-
Notifications
You must be signed in to change notification settings - Fork 2k
Pull requests: github/codeql
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Merge rc/1.19 into master
#662
by asger-semmle
Contributor
was closed Dec 13, 2018
Loading…
updated Dec 13, 2018
Java: Call sensitive dataflow
#2011
by criemen
Collaborator
was closed Oct 9, 2019
Loading…
updated Oct 9, 2019
C#: Fix various database errors
WIP
This is a work-in-progress, do not merge yet!
#1606
by calumgrant
Contributor
was closed Nov 10, 2019
Loading…
updated Nov 10, 2019
[CPP-418] QLDoc enhancements
C++
#1864
by zlaski-semmle
Contributor
was closed Nov 13, 2019
Loading…
updated Nov 13, 2019
Java Dataflow library: Add local path-sensitivity
Java
#2243
by criemen
Collaborator
was closed Nov 28, 2019
Loading…
updated Nov 28, 2019
JS: add query for useless use of cat
JS
#2867
by erik-krogh
Contributor
was merged Mar 3, 2020
Loading…
updated Mar 3, 2020
4 of 6 tasks
JS: add query js/memory-exhaustion
Awaiting evaluation
Do not merge yet, this PR is waiting for an evaluation to finish
JS
#3702
by esbena
Contributor
was merged Jun 19, 2020
Loading…
updated Jun 19, 2020
Relocate Java CWE libraries to importable location
#3923
by rvermeulen
Contributor
was closed Jul 8, 2020
Loading…
updated Jul 8, 2020
CWE-016 - Adds MaxRequestLength check for ASP.NET
C#
#2200
by cldrn
Contributor
was closed Aug 17, 2020
Loading…
updated Aug 17, 2020
C#: Improve db consistency by removing assembly id
#3350
by calumgrant
Contributor
was closed Sep 9, 2020
Loading…
updated Sep 9, 2020
Python: Copy sanitizes default modification
false-positive
Python
#3502
by yoff
Contributor
was closed Sep 9, 2020
Loading…
updated Sep 9, 2020
Python: Open URL without Certificate Validation
documentation
Java
JS
Python
#3878
by dilanbhalla
Contributor
was closed Apr 8, 2021
Loading…
updated Apr 9, 2021
Python: Fix join order in type trackers
no-change-note-required
This PR does not need a change note
Python
#5317
by tausbn
Contributor
was closed Apr 12, 2021
Loading…
updated Apr 12, 2021
Added a CodeQL query and tests for Django CSRF protection check.
Python
#3296
by Dhayalanb
was closed Apr 27, 2021
Loading…
updated Apr 27, 2021
Java: remove duplicate query
Java
#6169
by aibaars
Contributor
was closed Jun 28, 2021
Loading…
updated Jul 5, 2021
JS: recognize that checking for This PR does not need a change note
(constructor || prototype) && __proto__) is enough to prevent prototype pollution
JS
no-change-note-required
#6553
by erik-krogh
Contributor
was closed Aug 30, 2021
Loading…
updated Aug 30, 2021
Drop redundant columns from This PR should only be merged in sync with an internal Semmle PR
Java
JS
no-change-note-required
This PR does not need a change note
Python
files and folders relations
C#
C++
depends on internal PR
Python: Arbitrary file read and delete
documentation
Python
#7293
by haby0
Contributor
was closed Jan 7, 2022
Loading…
updated Jan 7, 2022
C#: Re-use asPartialModel in utility and test code.
C#
Java
no-change-note-required
This PR does not need a change note
Ruby
#8449
by michaelnebel
Contributor
was closed Mar 16, 2022
Loading…
updated Mar 16, 2022
Dataflow: Flow-state changing steps should always be in path explanations
C#
C++
Java
no-change-note-required
This PR does not need a change note
Python
Ruby
#8381
by MathiasVP
Contributor
was closed Mar 17, 2022
Loading…
updated Mar 17, 2022
Python: Urlopen without Certificate Validation
documentation
Python
#5644
by dilanbhalla
Contributor
was closed Jun 8, 2022
Loading…
updated Jun 8, 2022
Python: Fix points-to for unrelated modules with the same name.
Awaiting evaluation
Do not merge yet, this PR is waiting for an evaluation to finish
Python
WIP
This is a work-in-progress, do not merge yet!
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.