Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
50 Open 663 Closed
50 Open 663 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[Javascript] CWE-348: Client supplied ip used in security check documentation JS
#6864 opened Oct 13, 2021 by yabeow • Draft
23
JS: Support a taint tracking for arguments of .apply() function call JS
#6559 opened Aug 26, 2021 by yuske • Draft
@erik-krogh
15
[JS]: Adding express-validator support documentation JS
#18252 opened Dec 9, 2024 by GeekMasher Contributor Loading…
2 of 7 tasks
12
JS: add new query: js/unclosed-stream Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish documentation JS
#3682 opened Jun 11, 2020 by esbena Contributor • Draft
2 of 3 tasks
11
Add client-response Threat Model and update JS ClientsRequests documentation JS
#19656 opened Jun 3, 2025 by GeekMasher Contributor Loading…
9
Javascript: Regex Global Flag in Test Function documentation external-contribution JS
#15163 opened Dec 19, 2023 by aydinnyunus Contributor • Draft
8
python: Add provenance column to MaD JS Python Ruby
#15730 opened Feb 26, 2024 by yoff Contributor • Draft
6
JS: Web Cache Deception Express documentation external-contribution JS
#15180 opened Dec 20, 2023 by aydinnyunus Contributor • Draft
6
Just: introduce common "verbs" Actions Analysis of GitHub Actions C# C++ documentation Go Java JS Kotlin Python Ruby Rust Pull requests that update Rust code Swift
#19978 opened Jul 4, 2025 by redsun82 Contributor Loading…
5
Handling of axios in functions and making axios create function recur… documentation JS
#19337 opened Apr 19, 2025 by rotem-cider Loading…
4
MaD: Support contributing to concepts JS Python Ruby
#9046 opened May 5, 2022 by asgerf Contributor • Draft
4
Change definition of getFactoryNodeInternal JS no-change-note-required This PR does not need a change note
#19359 opened Apr 23, 2025 by jeongsoolee09 Contributor Loading…
3
Fix typo from occured to occurred Java JS
#19485 opened May 13, 2025 by BaseMax Loading…
3
JS: Add 'vulnerableCallModel' extension point JS Python Ruby
#13727 opened Jul 12, 2023 by asgerf Contributor • Draft
3
JS: refactor get predicates with no return JS
#18187 opened Dec 3, 2024 by Napalys Contributor • Draft
3
JS: Expose whether an endpoint name is synthetic JS no-change-note-required This PR does not need a change note
#15975 opened Mar 19, 2024 by asgerf Contributor Loading…
2
Add 'View DFG' queries C# DataFlow Library Java JS Ruby Rust Pull requests that update Rust code Swift
#21384 opened Feb 27, 2026 by asgerf Contributor • Draft
2
JS: Support value access paths in MaD type columns JS no-change-note-required This PR does not need a change note
#16037 opened Mar 25, 2024 by asgerf Contributor • Draft
2
ATM: undo unsound performance optimizations Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish JS
#8470 opened Mar 16, 2022 by esbena Contributor • Draft
2
JavaScript: Add setHTMLUnsafe and parseHTMLUnsafe as XSS sinks JS
#21648 opened Apr 3, 2026 by sunnyeo Loading…
1
JS: Module system refactoring documentation JS
#20414 opened Sep 11, 2025 by asgerf Contributor • Draft
1
JS: Only exclude JS files in the tsconfig outDir documentation JS
#21121 opened Jan 8, 2026 by asgerf Contributor • Draft
1
1
[DO NOT MERGE] Prior: Test PR JS no-change-note-required This PR does not need a change note
#19285 opened Apr 11, 2025 by navntoft Contributor Loading…
1
JS: Deprecate getAnExportedSymbol() and remove DubiousImport.ql documentation JS
#20412 opened Sep 11, 2025 by asgerf Contributor • Draft
1
JS: use the class hierarchy from TypeScript in the callgraph Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish JS no-change-note-required This PR does not need a change note
#5694 opened Apr 16, 2021 by erik-krogh Contributor • Draft
1
ProTip! Follow long discussions with comments:>50.