Skip to content

Issues: github/codeql

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

697 Open 1,204 Closed
697 Open 1,204 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

C#: False positive C# false-positive
#15253 opened Jan 8, 2024 by dmeierotto
Documentation clarification for cmpWithLinearBound question Further information is requested
#15248 opened Jan 8, 2024 by ong-yinggao98
Java: Add sinks for sun.misc.Unsafe question Further information is requested
#15247 opened Jan 7, 2024 by Marcono1234
SARIF: Backslash in query message is not escaped question Further information is requested
#15245 opened Jan 6, 2024 by Marcono1234
General issue with setup question Further information is requested
#15240 opened Jan 5, 2024 by KylerKatz
4
CodeQL not detecting YAML workflow vulnerabilities using on.push & on.pull_request question Further information is requested
#15239 opened Jan 5, 2024 by cpc-perrej
2
Create java database error：[ERROR] dataset import> diagnostic.trap.gz, 35344: java.io.EOFException: Unexpected end of ZLIB input stream. question Further information is requested
#15217 opened Jan 3, 2024 by brsun
5
Taint Tracking of Function Passed Through JSX Attributes acknowledged GitHub staff acknowledges this issue JS question Further information is requested
#15207 opened Dec 30, 2023 by gtsp233
1
2
Encountering a Problem with CodeQL-ruby Query during the Execution Phase of the epsilonStar Function question Further information is requested
#15199 opened Dec 23, 2023 by spingARbor
4
Error in creating a new java pro database question Further information is requested
#15198 opened Dec 23, 2023 by Xieyufengdd
4
IRGuardCondition failure to detect NULL condition C++ question Further information is requested
#15186 opened Dec 21, 2023 by tardigrade-9
12
False positive: py/url-redirection does not recognise sanitisation by checking netloc false-positive Python
#15178 opened Dec 20, 2023 by max-schaefer
1
@max-schaefer
2
Incomplete documentation for cs/web/broad-cookie-domain C# documentation
#15169 opened Dec 19, 2023 by johnaceous
1
False positive: cs/web/broad-cookie-domain for Domain = null or "" false-positive
#15168 opened Dec 19, 2023 by johnaceous
C#: Missing modelling of Newtonsoft.Json StringEscapeHandling false-positive
#15155 opened Dec 19, 2023 by max-schaefer
C#: Azure Function HttpTrigger SQL Injection is not being detected question Further information is requested
#15102 opened Dec 14, 2023 by DavidJFowler
1
False positive: it is valid to escape $ in javascript template string syntax false-positive
#15077 opened Dec 12, 2023 by rictic
General issue [Azure DevOps Pipeline]: pipeline is stuck at "Starting evaluation of codeql/csharp-queries/Telemetry/UnsupportedExternalAPIs.ql." step question Further information is requested
#15059 opened Dec 10, 2023 by ibrahim-amer
2
False positive: HTTP response splitting false-positive
#15056 opened Dec 9, 2023 by JLLeitschuh
6
False positive: XSS when MimeType.TEXT has been set false-positive
#15055 opened Dec 9, 2023 by JLLeitschuh
1
Improve cpp/wrong-type-format-argument by adding correct formatting specifier question Further information is requested
#15028 opened Dec 6, 2023 by AMS21
1
CodeQL adds redundant slash to upload sarif file endpoint question Further information is requested
#15020 opened Dec 6, 2023 by filipss379
15
C++: Return statement inside Guard Block false-positive
#15001 opened Dec 5, 2023 by tardigrade-9
5
C# Dataflow limited heavily by lack of support for ServiceProvider and Dependency Injection tracking question Further information is requested
#14998 opened Dec 4, 2023 by ShiningMassXAcc
2
cpp/memory-may-not-be-freed is not in security-and-quality suite question Further information is requested
#14955 opened Nov 30, 2023 by szsam
1
ProTip! Type g i on any issue or pull request to go back to the issue listing page.