Sitelet https://web.archive.org/web/20210505201618/https://github.com/github/codeql/pulls
Skip to content

/ codeql

New pull request New
149 Open 4,819 Closed
149 Open 4,819 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
C++: SqlPqxxTainted query searches for sql injections via pqxx connector to postgres
C++ documentation
#5842 opened May 5, 2021 by japroc • Review required
JS: Add query for unsafe construction of code from library input
Awaiting evaluation JS documentation
#5841 opened May 5, 2021 by erik-krogh • Draft
Update code scanning selectors to include summary metrics and @kind alert aliases
#5840 opened May 5, 2021 by henrymercer • Review required
2
Add security-severity scores
C# C++ JS Java Python
#5839 opened May 5, 2021 by calumgrant • Draft
Minor updates to the renamed Qhelp file in 5774
Java documentation
#5837 opened May 5, 2021 by felicitymay • Review required
1
Python: Support EC keygen without class-instance for cryptography
Python no-change-note-required
#5836 opened May 5, 2021 by RasmusWL • Review required
1
JS: add array.filter() as a taint-step
Awaiting evaluation JS
#5833 opened May 4, 2021 by erik-krogh • Draft
Java: github action for CSV coverage report
#5832 opened May 4, 2021 by tamasvajk • Draft
1
Update CodeQL CLI article to use different query suite example
documentation
#5831 opened May 4, 2021 by felicitymay • Draft
3
Docs: Use GitHub links for guides, improve formatting
documentation
#5830 opened May 4, 2021 by Marcono1234 • Review required
[Java] Add support for com.google.common.base.MoreObjects#firstNonNull
Java documentation
#5824 opened May 3, 2021 by JLLeitschuh • Review required
Java: Promote JEXL Injection query from experimental
Java documentation
#5823 opened May 3, 2021 by atorralba • Review required
4
C#: Improve CFG for constructors when there are multiple implementations
C# no-change-note-required
#5820 opened May 3, 2021 by hvitved • Review required
@tamasvajk
2
Java: CWE-094 Jython code injection
Java documentation
#5819 opened May 3, 2021 by luchua-bc • Review required
4
Java: Unsafe RMI deserialization
Java documentation
#5818 opened May 1, 2021 by artem-smotrakov • Review required
10
Java: Replace usage of toString() for Javadoc queries; add more Javadoc tags
Java
#5815 opened Apr 30, 2021 by Marcono1234 • Review required
[Java] Add taint tracking through Jackson deserialization
Java documentation
#5814 opened Apr 30, 2021 by JLLeitschuh • Review required
15
Java: Add query - insecure environment configuration during JMX/RMI server init
Java documentation
#5811 opened Apr 30, 2021 by timoles • Review required
33
Add heuristic query identifying probable SQL injection sinks
Java
#5806 opened Apr 29, 2021 by smowton • Draft
1
Java: CWE-094 Rhino code injection
Java documentation
#5802 opened Apr 29, 2021 by luchua-bc • Review required
30
Python: Various MRO performance fixes
Python
#5799 opened Apr 28, 2021 by tausbn • Draft
1
Java: Add synthetic fields; model Commons Lang's MutableObject type
Java
#5796 opened Apr 28, 2021 by smowton • Review required
1
JS: Generalize and expand RxJS pipe support
JS no-change-note-required
#5794 opened Apr 28, 2021 by erik-krogh • Review required
Java: Override toString() for statements
Java no-change-note-required
#5788 opened Apr 27, 2021 by Marcono1234 • Review required
11
Java: Denial of Service due to decoding of untrusted input
Java
#5776 opened Apr 26, 2021 by porcupineyhairs • Review required
6
ProTip! Updated in the last three days: updated:>2021-05-02.