Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
393 Open 16,621 Closed
393 Open 16,621 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Bump the go_modules group across 2 directories with 3 updates dependencies Pull requests that update a dependency file documentation Go
#20608 opened Oct 9, 2025 by dependabot Bot Loading…
2
Bump rayon from 1.10.0 to 1.11.0 in /ql dependencies Pull requests that update a dependency file QL-for-QL
#20212 opened Aug 13, 2025 by dependabot Bot Loading…
JS: Fix bad join in export logic JS
#20952 opened Dec 2, 2025 by asgerf Contributor • Draft
C#: Add osx-arm64 as a possible RID. C#
#20998 opened Dec 9, 2025 by michaelnebel Contributor • Draft
C# SSRF Improvements C# documentation
#20284 opened Aug 26, 2025 by Kwstubbs Contributor Loading…
9
Change definition of getFactoryNodeInternal JS no-change-note-required This PR does not need a change note
#19359 opened Apr 23, 2025 by jeongsoolee09 Contributor Loading…
3
Fix typo from occured to occurred Java JS
#19485 opened May 13, 2025 by BaseMax Loading…
3
Rust: skip private items when extracting library files Rust Pull requests that update Rust code
#19581 opened May 26, 2025 by aibaars Contributor • Draft
JS: Refactor Nest test suite with inline expectations JS no-change-note-required This PR does not need a change note
#19514 opened May 19, 2025 by Napalys Contributor • Draft
Crypto: Add some example Java cryptographic discovery queries Java
#20567 opened Oct 1, 2025 by unprovable Contributor Loading…
JS: Only exclude JS files in the tsconfig outDir documentation JS
#21121 opened Jan 8, 2026 by asgerf Contributor • Draft
1
1
[Draft] Java: Add remote flow sources for jakarta.websocket Java
#21041 opened Dec 15, 2025 by joefarebrother Contributor • Draft
1
Crypto: Add BouncyCastle signatures and block cipher modes documentation Java
#20575 opened Oct 2, 2025 by nicolaswill Contributor Loading…
2
Java: Add existing models of file reads to local threat model sources Java
#20533 opened Sep 26, 2025 by owen-mc Contributor • Draft
WIP: Go/PamAuthBypass Go
#20642 opened Oct 14, 2025 by d10c Contributor • Draft
Java: Add support for data flow through thrown exceptions. Java
#20867 opened Nov 19, 2025 by aschackmull Contributor • Draft
3
Java: Propagate taint through field reads Java
#20865 opened Nov 18, 2025 by owen-mc Contributor • Draft
1
C#: Narrow scaffolding to (transitive) dependencies. C#
#20763 opened Nov 5, 2025 by michaelnebel Contributor • Draft
C#: Overlay annotations. C# documentation
#20756 opened Nov 4, 2025 by michaelnebel Contributor • Draft
JS: Add class harness to recover localFieldStep edges JS
#19287 opened Apr 11, 2025 by asgerf Contributor • Draft
actions: Add some missing permissions Actions Analysis of GitHub Actions documentation
#19357 opened Apr 23, 2025 by yoff Contributor Loading…
4
[DO NOT MERGE] Prior: Test PR JS no-change-note-required This PR does not need a change note
#19285 opened Apr 11, 2025 by navntoft Contributor Loading…
1
Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group across 1 directory dependencies Pull requests that update a dependency file
#19275 opened Apr 10, 2025 by dependabot Bot Loading…
Handling of axios in functions and making axios create function recur… documentation JS
#19337 opened Apr 19, 2025 by rotem-cider Loading…
4
Go: fix models through redefined types Go
#19653 opened Jun 3, 2025 by owen-mc Contributor • Draft
ProTip! What’s not been updated in a month: updated:<2026-03-30.