Skip to content
New pull request New
170 Open 5,666 Closed
170 Open 5,666 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Fixed a typo. ( Minor PR)
Ruby
#7012 opened Oct 31, 2021 by MalikIdreesHasanKhan • Approved
Dbartol/rc/merge
documentation Ruby
#7011 opened Oct 31, 2021 by dbartol • Draft
JS: make array taint-step better
JS
#7010 opened Oct 31, 2021 by japroc • Review required
Python : Add sanitizers for Path Injection Query
Python
#7009 opened Oct 29, 2021 by porcupineyhairs • Review required
3
Java: Model java.util.Optional lambda methods
documentation Java
#7008 opened Oct 29, 2021 by JLLeitschuh • Review required
1
Java: Ratpack HTTP Framework Additional Modeling
documentation Java
#7007 opened Oct 29, 2021 by JLLeitschuh • Review required
2
Java: Deprecate StringLiteral.getRepresentedString()
documentation Java
#7004 opened Oct 29, 2021 by Marcono1234 • Approved
1
JS: Fix FP in mixed-this static access
JS no-change-note-required
#7003 opened Oct 29, 2021 by asgerf • Approved
1
Java: Add FieldValueNode to break up cartesian step relation.
Java no-change-note-required
#7002 opened Oct 29, 2021 by aschackmull • Review required
Rewrite qhelp-pr-preview.yml
#6995 opened Oct 28, 2021 by aibaars • Draft
2
remove redundant inline casts
C# C++ Java JS no-change-note-required Python Ruby
#6994 opened Oct 28, 2021 by erik-krogh • Approved
9
JS: Recognize regexp-based '..' check in tainted path
Awaiting evaluation JS no-change-note-required
#6993 opened Oct 28, 2021 by asgerf • Approved
1
1
Java: Expand org.apache.commons.codec model
Java
#6988 opened Oct 28, 2021 by bmuskalla • Review required
2
Update tracing-subscriber requirement from 0.2 to 0.3 in /ruby/generator
dependencies Ruby
#6986 opened Oct 28, 2021 by dependabot bot • Review required
Update tracing-subscriber requirement from 0.2 to 0.3 in /ruby/extractor
dependencies Ruby
#6985 opened Oct 28, 2021 by dependabot bot • Review required
Ruby: add regex injection query
documentation Ruby
#6978 opened Oct 27, 2021 by nickrolfe • Review required
7
Java: CWE-266 - Query to detect Intent URI Permission Manipulation in Android applications
Java
#6975 opened Oct 27, 2021 by atorralba • Review required
Python: Promote ReDoS queries
Awaiting evaluation documentation Python
#6972 opened Oct 27, 2021 by yoff • Approved
2
Android: Add ExplicitIntentSanitizer and allowIntentExtrasImplicitRead
Java
#6966 opened Oct 26, 2021 by atorralba • Review required
Android: Add the Intent parameter of the onActivityResult method as a source
Java
#6963 opened Oct 26, 2021 by atorralba • Review required
RC 3.3: merge codeql-ruby repository into github/codeql
documentation no-change-note-required
#6955 opened Oct 25, 2021 by aibaars • Review required
@dbartol
7
CPP: Add query for CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
C++ documentation
#6950 opened Oct 25, 2021 by ihsinme • Approved
@geoffw0
14
CPP: Add query for CWE-266 Incorrect Privilege Assignment
C++ documentation
#6949 opened Oct 25, 2021 by ihsinme • Review required
@geoffw0
6
CPP: Add query for CWE-243 Creation of chroot Jail Without Changing Working Directory
C++ documentation
#6948 opened Oct 25, 2021 by ihsinme • Review required
@MathiasVP
18
CPP: Add query for CWE-377 Insecure Temporary File
C++ documentation
#6947 opened Oct 25, 2021 by ihsinme • Review required
@MathiasVP
22
ProTip! What’s not been updated in a month: updated:<2021-09-30.