Search results

ReDoS refactorizations

documentation

Java

JS

Python

QL-for-QL

Ruby

Status: Closed (abandoned).

github/codeqlnumber 8522

#8522 In github/codeql;

· by erik-krogh was closed on Jun 29, 2022

Data flow: Use parameterized module to share code between pruning stages

C#

C++

Java

Python

Ruby

Status: Closed (abandoned).

github/codeqlnumber 8301

#8301 In github/codeql;

· by hvitved was closed on Aug 8, 2022

Java: CWE-1004 Query to check sensitive cookies without the HttpOnly flag set

documentation

Java

Status: Merged (completed).

github/codeqlnumber 5307

#5307 In github/codeql;

· by luchua-bc was closed on Apr 13, 2021

[Java] CWE-089 MyBatis Mapper Sql Injection

documentation

Java

no-change-note-requiredThis PR does not need a change noteThis PR does not need a change note

Status: Merged (completed).

github/codeqlnumber 6319

#6319 In github/codeql;

· by haby0 was closed on Dec 9, 2021

[Java] CWE-348: Using a client-supplied IP address in a security check

documentation

Java

Status: Merged (completed).

github/codeqlnumber 5631

#5631 In github/codeql;

· by haby0 was closed on Apr 30, 2021

Java: Unsafe resource loading in Android webview

C#

C++

documentation

Java

JS

Python

Status: Closed (abandoned).

github/codeqlnumber 3706

#3706 In github/codeql;

· by luchua-bc was closed on Oct 19, 2020

Java: CWE-502 Unsafe JSON deserialization with Gson, Flexjson, Jabsorb and JoddJson

documentation

Java

Status: Closed (abandoned).

github/codeqlnumber 5954

#5954 In github/codeql;

· by luchua-bc was closed on Oct 12, 2021

[Java] Add QL for detecting Spring View Manipulation Vulnerabilities.

documentation

Java

no-change-note-requiredThis PR does not need a change noteThis PR does not need a change note

Status: Merged (completed).

github/codeqlnumber 4214

#4214 In github/codeql;

· by ghost was closed on Mar 2, 2021

Java: Experimental version of Java Command Injection query

documentation

Java

Status: Merged (completed).

github/codeqlnumber 13484

#13484 In github/codeql;

· by aegilops was closed on Aug 4, 2023

Java: Add query - insecure environment configuration during JMX/RMI server init

documentation

Java

Status: Merged (completed).

github/codeqlnumber 5811

#5811 In github/codeql;

· by timoles was closed on Jun 25, 2021

Java: CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

documentation

Java

no-change-note-requiredThis PR does not need a change noteThis PR does not need a change note

Status: Merged (completed).

github/codeqlnumber 5435

#5435 In github/codeql;

· by haby0 was closed on Aug 2, 2021

WIP: Add threat models to java

Java

Status: Closed (abandoned).

github/codeqlnumber 12958

#12958 In github/codeql;

· by aeisenberg was closed on Oct 19, 2023