Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
85 Open 2,480 Closed
85 Open 2,480 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Shared: Make UniversalFlow overlay-aware. C++ Java
#20884 opened Nov 21, 2025 by aschackmull Contributor • Draft
Shared: Improve range analysis for phis at loop exits C++ Java
#21135 opened Jan 9, 2026 by MathiasVP Contributor • Draft
Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.25.4 in /java/ql/test/utils/flowtestcasegenerator in the maven group across 1 directory dependencies Pull requests that update a dependency file Java
#21696 opened Apr 10, 2026 by dependabot Bot Loading…
Crypto: Add some example Java cryptographic discovery queries Java
#20567 opened Oct 1, 2025 by unprovable Contributor Loading…
Java: Add existing models of file reads to local threat model sources Java
#20533 opened Sep 26, 2025 by owen-mc Contributor • Draft
Bump org.springframework:spring-context from 5.3.18 to 5.3.19 in /java/ql/test/utils/flowtestcasegenerator dependencies Pull requests that update a dependency file Java
#15515 opened Feb 2, 2024 by dependabot Bot Loading…
Java: port the bad-tag-filter to java documentation Java
#10058 opened Aug 16, 2022 by erik-krogh Contributor • Draft
Java: Add getJavadoc predicate for JavadocParent and JavadocElement documentation Java
#10499 opened Sep 20, 2022 by Marcono1234 Contributor Loading…
Bump org.apache.shiro:shiro-core from 1.8.0 to 1.13.0 in /java/ql/test/utils/flowtestcasegenerator dependencies Pull requests that update a dependency file Java
#15344 opened Jan 16, 2024 by dependabot Bot Loading…
Java: Enable data flow consistency checks. Java
#13436 opened Jun 12, 2023 by aschackmull Contributor • Draft
Java: Add BoundedType.getTypeBound(int) Java
#5406 opened Mar 13, 2021 by Marcono1234 Contributor Loading…
Bump shiro-core from 1.8.0 to 1.10.0 in /java/ql/test/utils/flowtestcasegenerator dependencies Pull requests that update a dependency file Java
#11444 opened Nov 28, 2022 by dependabot Bot Loading…
Netty support Java
#5989 opened Jun 2, 2021 by pwntester Contributor Loading…
Bump junit:junit from 4.11 to 4.13.1 in /java/ql/integration-tests/all-platforms/java/buildless-maven dependencies Pull requests that update a dependency file Java
#14287 opened Sep 21, 2023 by dependabot Bot Loading…
Bump org.springframework:spring-webmvc from 4.0.2.RELEASE to 6.1.13 in /java/ql/integration-tests/java/java-web-jsp in the maven group across 1 directory dependencies Pull requests that update a dependency file Java
#17466 opened Sep 13, 2024 by dependabot Bot Loading…
Kotlin: Add a test for parcelize, and improve tryReplaceFunctionInSyntheticClass Java
#13450 opened Jun 14, 2023 by igfoo Contributor • Draft
Bump org.owasp.esapi:esapi from 2.2.3.1 to 2.5.2.0 in /java/ql/test/utils/flowtestcasegenerator dependencies Pull requests that update a dependency file Java
#14624 opened Oct 27, 2023 by dependabot Bot Loading…
Java: Replace usage of toString() for Javadoc queries; add more Javadoc tags Java
#5815 opened Apr 30, 2021 by Marcono1234 Contributor Loading…
Bump log4j-core from 2.14.1 to 2.17.1 in /java/ql/test/utils/flowtestcasegenerator dependencies Pull requests that update a dependency file Java
#11445 opened Nov 28, 2022 by dependabot Bot Loading…
Java: Add more entrypoint types Java
#11937 opened Jan 20, 2023 by atorralba Contributor • Draft
Data flow: Remove allowParameterReturnInSelf restriction C# C++ DataFlow Library Go Java Python Ruby Rust Pull requests that update Rust code Swift
#18217 opened Dec 5, 2024 by hvitved Contributor • Draft
Bump spring-web from 5.3.18 to 6.0.0 in /java/ql/test/utils/flowtestcasegenerator dependencies Pull requests that update a dependency file Java
#11646 opened Dec 10, 2022 by dependabot Bot Loading…
Shared: support quoted operands in access path components C# Go Java JS no-change-note-required This PR does not need a change note Python Ruby Swift
#13441 opened Jun 13, 2023 by asgerf Contributor • Draft
Java: add a new query cover some instance of CWE-209 Java
#14827 opened Nov 17, 2023 by Chisatozt Loading…
C++/Java/C# Shared Range Analysis: BigInt rewrite experiment C# C++ Java
#16864 opened Jun 27, 2024 by d10c Contributor • Draft
ProTip! Updated in the last three days: updated:>2026-04-27.