Skip to content
New pull request New
165 Open 5,661 Closed
165 Open 5,661 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Rewrite qhelp-pr-preview.yml
#6995 opened Oct 28, 2021 by aibaars • Draft
remove redundant inline casts
C# C++ Java JS no-change-note-required Python Ruby
#6994 opened Oct 28, 2021 by erik-krogh • Approved
4
JS: Recognize regexp-based '..' check in tainted path
Awaiting evaluation JS no-change-note-required
#6993 opened Oct 28, 2021 by asgerf • Approved
1
1
Python: Support flask.blueprints.Blueprint
no-change-note-required Python
#6991 opened Oct 28, 2021 by RasmusWL • Review required
3
Java: Expand org.apache.commons.codec model
Java
#6988 opened Oct 28, 2021 by bmuskalla • Review required
2
Update tracing-subscriber requirement from 0.2 to 0.3 in /ruby/generator
dependencies Ruby
#6986 opened Oct 28, 2021 by dependabot bot • Review required
Update tracing-subscriber requirement from 0.2 to 0.3 in /ruby/extractor
dependencies Ruby
#6985 opened Oct 28, 2021 by dependabot bot • Review required
Ruby: add regex injection query
documentation Ruby
#6978 opened Oct 27, 2021 by nickrolfe • Draft
5
Java: CWE-266 - Query to detect Intent URI Permission Manipulation in Android applications
Java
#6975 opened Oct 27, 2021 by atorralba • Review required
Python: Promote ReDoS queries
Awaiting evaluation documentation Python
#6972 opened Oct 27, 2021 by yoff • Approved
2
Android: Add ExplicitIntentSanitizer and allowIntentExtrasImplicitRead
Java
#6966 opened Oct 26, 2021 by atorralba • Review required
Fix LGTM version number in language reference
documentation no-change-note-required
#6965 opened Oct 26, 2021 by edoardopirovano • Approved
Android: Add the Intent parameter of the onActivityResult method as a source
Java
#6963 opened Oct 26, 2021 by atorralba • Review required
RC 3.3: merge codeql-ruby repository into github/codeql
documentation no-change-note-required
#6955 opened Oct 25, 2021 by aibaars • Review required
@dbartol
1
CPP: Add query for CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
C++ documentation
#6950 opened Oct 25, 2021 by ihsinme • Approved
@geoffw0
12
CPP: Add query for CWE-266 Incorrect Privilege Assignment
C++ documentation
#6949 opened Oct 25, 2021 by ihsinme • Review required
@geoffw0
6
CPP: Add query for CWE-243 Creation of chroot Jail Without Changing Working Directory
C++ documentation
#6948 opened Oct 25, 2021 by ihsinme • Review required
@MathiasVP
17
CPP: Add query for CWE-377 Insecure Temporary File
C++ documentation
#6947 opened Oct 25, 2021 by ihsinme • Review required
@MathiasVP
22
Java: CWE-347 Query for detecting Signature Exclusion Attack with SAML assertion
documentation Java
#6935 opened Oct 22, 2021 by luchua-bc • Review required
7
Use the new instanceof syntax everywhere
C++ JS no-change-note-required Python
#6934 opened Oct 21, 2021 by erik-krogh • Approved
Dataflow: Add support for call context restrictions on sources/sinks.
C# C++ Java Python Ruby
#6932 opened Oct 21, 2021 by aschackmull • Review required
6
Data flow: Restrict derived flow summaries
C# Java
#6931 opened Oct 21, 2021 by hvitved • Review required
Java: CWE-470 - Queries to detect Fragment Injection in Android applications
documentation Java
#6923 opened Oct 20, 2021 by atorralba • Review required
Java: Prevent a configuration from being visible globally
Java no-change-note-required
#6888 opened Oct 14, 2021 by joefarebrother • Review required
4
JS: add pragma[noinline] to predicates where the qldoc mentions join-order
JS
#6881 opened Oct 14, 2021 by erik-krogh • Review required
1
ProTip! no:milestone will show everything without a milestone.