Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
86 Open 2,993 Closed
86 Open 2,993 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Java: Add ReDoS queries documentation Java JS Python Ruby
#7723 by joefarebrother Contributor was merged May 12, 2022 Loading…
168
Java: CWE-200: Temp directory local information disclosure vulnerability documentation Java ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#4388 by JLLeitschuh Contributor was merged Feb 14, 2022 Loading…
@aschackmull
159
ReDoS refactorizations documentation Java JS Python QL-for-QL Ruby
#8522 by erik-krogh Contributor was closed Jun 29, 2022 • Draft
151
Data flow: Use parameterized module to share code between pruning stages C# C++ Java Python Ruby
#8301 by hvitved Contributor was closed Aug 8, 2022 • Draft
149
Java: JSONP Injection documentation Java
#5206 by haby0 Contributor was merged Apr 16, 2021 Loading…
@tamasvajk
147
C#: Sign analysis C# Java
#4193 by tamasvajk Contributor was merged Sep 22, 2020 Loading…
142
Java: Automodel Framework Mode Extraction Queries Java no-change-note-required This PR does not need a change note
#12830 by kaeluka was merged May 11, 2023 Loading…
@kaeluka
140
Java: Insecure basic authentication Java
#3976 by luchua-bc Contributor was merged Aug 7, 2020 Loading…
138
Java: Add/improve insecure trustmanager query documentation Java no-change-note-required This PR does not need a change note ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#4879 by intrigus-lgtm Contributor was merged Jun 25, 2021 Loading…
@smowton
133
Java: CWE-1004 Query to check sensitive cookies without the HttpOnly flag set documentation Java
#5307 by luchua-bc Contributor was merged Apr 13, 2021 Loading…
@smowton
131
Java: Add Guard Classes for checking OS & unify System Property Access documentation Java
#8032 by JLLeitschuh Contributor was merged Mar 18, 2022 Loading…
1
124
Java: Add support for Java 21 language features documentation Java
#14671 by smowton Contributor was merged Nov 30, 2023 Loading…
123
[Java] CWE-089 MyBatis Mapper Sql Injection documentation Java no-change-note-required This PR does not need a change note
#6319 by haby0 Contributor was merged Dec 9, 2021 Loading…
118
Initial Kotlin support C# depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation Java Kotlin
#9109 by igfoo Contributor was merged May 11, 2022 Loading…
116
[Java] CWE-348: Using a client-supplied IP address in a security check documentation Java
#5631 by haby0 Contributor was merged Apr 30, 2021 Loading…
@smowton
108
Java : add request forgery query documentation Java
#3454 by ghost was merged Nov 26, 2020 Loading…
@smowton
107
Java: Unsafe resource loading in Android webview C# C++ documentation Java JS Python
#3706 by luchua-bc Contributor was closed Oct 19, 2020 Loading…
@smowton
104
Java: Decompression Bombs documentation external-contribution Java
#13555 by am0o0 Contributor was merged Jul 31, 2024 Loading…
102
Promote SSRF query from experimental documentation Java
#5587 by smowton Contributor was merged Jun 17, 2021 Loading…
102
Java: CWE-502 Unsafe JSON deserialization with Gson, Flexjson, Jabsorb and JoddJson documentation Java
#5954 by luchua-bc Contributor was closed Oct 12, 2021 Loading…
@aschackmull
101
Java: Unsafe deserialization with Jackson documentation Java
#5900 by artem-smotrakov Contributor was merged Aug 2, 2021 Loading…
@aschackmull
100
Java: Add QL support for automodel application mode Java no-change-note-required This PR does not need a change note
#13239 by tausbn Contributor was merged Jun 14, 2023 Loading…
@adityasharad
99
Java: Convert SensitiveApi.qll to use Models-as-Data documentation Java
#13978 by egregius313 Contributor was merged Oct 31, 2023 Loading…
99
Kotlin: build extractor with bazel documentation Java Kotlin
#16117 by redsun82 Contributor was merged Jun 4, 2024 Loading…
99
Java/Cfg: Introduce new shared CFG library and replace the Java CFG. documentation Java Kotlin
#21290 by aschackmull Contributor was merged Mar 2, 2026 Loading…
96
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.