The Wayback Machine - https://web.archive.org/web/20210506203518/https://github.com/github/codeql/pulls
Skip to content

/ codeql

New pull request New
151 Open 4,823 Closed
151 Open 4,823 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
C#: Escape IDs in TRAP label definitions
C#
#5848 opened May 6, 2021 by hvitved • Draft
Improve wrong in detecting and handling memory allocation errors
C++ documentation no-change-note-required
#5847 opened May 6, 2021 by MathiasVP • Review required
50
Java: Promote Unsafe resource loading in Android WebView from experimental
Java documentation
#5846 opened May 6, 2021 by atorralba • Draft
[Java] CWE-601 Spring url redirection detect
Java documentation
#5844 opened May 6, 2021 by haby0 • Review required
[Java] Fix Kryo FP & Kryo 5 Support
Java documentation
#5843 opened May 5, 2021 by JLLeitschuh • Review required
1
1
C++: SqlPqxxTainted query searches for sql injections via pqxx connector to postgres
C++ documentation
#5842 opened May 5, 2021 by japroc • Review required
2
JS: Add query for unsafe construction of code from library input
JS documentation
#5841 opened May 5, 2021 by erik-krogh • Review required
1
Add security-severity scores
C# C++ JS Java Python
#5839 opened May 5, 2021 by calumgrant • Draft
Python: Support EC keygen without class-instance for cryptography
Python no-change-note-required
#5836 opened May 5, 2021 by RasmusWL • Review required
1
JS: add array.filter() as a taint-step
JS no-change-note-required
#5833 opened May 4, 2021 by erik-krogh • Review required
Java: github action for CSV coverage report
#5832 opened May 4, 2021 by tamasvajk • Draft
1
Update CodeQL CLI article to use different query suite example
documentation
#5831 opened May 4, 2021 by felicitymay • Draft
3
[Java] Add support for com.google.common.base.MoreObjects#firstNonNull
Java documentation
#5824 opened May 3, 2021 by JLLeitschuh • Review required
Java: Promote JEXL Injection query from experimental
Java documentation
#5823 opened May 3, 2021 by atorralba • Review required
4
C#: Improve CFG for constructors when there are multiple implementations
C# no-change-note-required
#5820 opened May 3, 2021 by hvitved • Review required
@tamasvajk
2
Java: CWE-094 Jython code injection
Java documentation
#5819 opened May 3, 2021 by luchua-bc • Review required
4
Java: Unsafe RMI deserialization
Java documentation
#5818 opened May 1, 2021 by artem-smotrakov • Review required
10
Java: Replace usage of toString() for Javadoc queries; add more Javadoc tags
Java
#5815 opened Apr 30, 2021 by Marcono1234 • Review required
[Java] Add taint tracking through Jackson deserialization
Java documentation
#5814 opened Apr 30, 2021 by JLLeitschuh • Review required
15
Java: Add query - insecure environment configuration during JMX/RMI server init
Java documentation
#5811 opened Apr 30, 2021 by timoles • Review required
33
Add heuristic query identifying probable SQL injection sinks
Java
#5806 opened Apr 29, 2021 by smowton • Draft
1
Java: CWE-094 Rhino code injection
Java documentation
#5802 opened Apr 29, 2021 by luchua-bc • Review required
30
Python: Various MRO performance fixes
Python
#5799 opened Apr 28, 2021 by tausbn • Draft
1
Java: Add synthetic fields; model Commons Lang's MutableObject type
Java
#5796 opened Apr 28, 2021 by smowton • Review required
1
JS: Generalize and expand RxJS pipe support
JS no-change-note-required
#5794 opened Apr 28, 2021 by erik-krogh • Review required
ProTip! Exclude everything labeled bug with -label:bug.