codeql icon indicating copy to clipboard operation
codeql copied to clipboard

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Results 758 codeql issues
Sort by recently updated
recently updated
newest added
trafficstars

Dummy commit for running tests after merging main

### TLDR In this PR we re-generate the .NET 8 runtime models based on the mixed model generation. - A minor update for the `cs/information-exposure-through-exception` query is needed. - To...

C#
documentation

### TLDR In this PR we re-generate the Java SDK 17 models using the *mixed* model generator. That is, we use the content based (field aware) model generation where applicable,...

documentation
Java

This PR adds `javax.servlet.http.Part` and `org.apache.commons.fileupload.FileItem/Stream` support to RemoteFlow Sources.

documentation
Java

This caused a dataset check error on the `python/cpython` database, as we had a `DictUnpacking` node whose parent was not a `dict_item_list`, but rather an `expr_list`. Investigating a bit further...

Python
no-change-note-required

Fixes a dataset check failure for the `py_cobjectnames` relation seen on `python/cpython`. ### Pull Request checklist #### All query authors - [ ] A change note is added if necessary....

Python
no-change-note-required

This PR makes two small improvements to the SSA: * Mutable variables that are captured are now supported. Immutable variables where already supported. I don't think allowing mutable variables as...

Rust

This adds support for speculative taint flow in the shared taint tracking library. ### What is this? This is a magic button (dial, really) that you can turn to calculate...

C#
C++
Java
Python
Go
Ruby
Swift
DataFlow Library