github / codeql

Watch 69
Star 1.5k
Fork 382

Code
Issues 181
Pull requests 117
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 25 Milestones 5

New pull request New

117 Open 3,701 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

JS: change `SimpleParameter` to `Parameter` in the express model to support destructuring parameters

#4352 opened Sep 26, 2020 by erik-krogh • Draft

C++: Add dataflow through deep struct indirections

C++

#4350 opened Sep 25, 2020 by MathiasVP • Review required

ModulusAnalysis shared between C# and Java

C# Java

#4349 opened Sep 25, 2020 by tamasvajk • Draft

JS: Add model for needle in ClientRequests.qll

#4348 opened Sep 25, 2020 by erik-krogh • Draft

JavaScript: Handle empty `package.json` files gracefully.

#4347 opened Sep 25, 2020 by max-schaefer • Approved

Python: add test for implicit __init__.py files

Python

#4346 opened Sep 25, 2020 by RasmusWL • Review required

C++: Models for std::pair, std::map and std::unordered_map

C++ documentation

#4345 opened Sep 25, 2020 by geoffw0 • Review required

JS: tag consistency: replace cwe-20 with cwe-020

#4344 opened Sep 25, 2020 by esbena • Review required

C++: Add some IR QLDoc

C# C++

#4343 opened Sep 24, 2020 by rdmarsh2 • Review required

JS: type-track objects where the "$where" property has been written

#4342 opened Sep 24, 2020 by erik-krogh • Draft

Java: Include column numbers in Location.toString

Java depends on internal PR

#4341 opened Sep 24, 2020 by joefarebrother • Review required

C++: accept test changes from extractor frontend upgrade

C++ depends on internal PR

#4340 opened Sep 24, 2020 by nickrolfe • Review required

Java: Add synthetic nodes for `LocalVariableDeclExpr`s in the AST view

Java

#4339 opened Sep 24, 2020 by joefarebrother • Approved

JS: add http request server data as a RemoteFlowSource

#4338 opened Sep 24, 2020 by erik-krogh • Draft

Java: add Android database taint and SQL injection sinks

Java

#4336 opened Sep 23, 2020 by aibaars • Draft

Java: PrintAst: Add TypeAccess as a child of LocalVariableDeclExpr

Java

#4333 opened Sep 23, 2020 by joefarebrother • Draft

C#: Upgrade to .net core app 3.1

#4330 opened Sep 23, 2020 by tamasvajk • Draft

JS: Add source and sink for DVSA

#4329 opened Sep 23, 2020 by erik-krogh • Draft

JS: better join-order fix in HTTP

Awaiting evaluation JS

#4328 opened Sep 22, 2020 by erik-krogh • Draft

Handle unsigned types in sign analysis (C# and Java)

C# Java

#4324 opened Sep 22, 2020 by tamasvajk • Draft

C++: Support custom defs in SimpleRangeAnalysis

C++

#4322 opened Sep 22, 2020 by jbj • Review required

CodeQL docs: mention `generate query-help` CLI command

#4321 opened Sep 22, 2020 by jf205 • Approved

Java: add Spring::MultipartRequest as taint source

Java documentation

#4320 opened Sep 22, 2020 by aibaars • Review required

C#: Add implicit cast from array to pointer

#4318 opened Sep 22, 2020 by tamasvajk • Approved

C#: Adds check for Server Side Template Injection vulnerabilities in RazorEngine

#4313 opened Sep 22, 2020 by cldrn • Review required

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Type g i on any issue or pull request to go back to the issue listing page.