hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
move-cors-query-from-experimental2
codeql/python/ql/src/Security
History
Michael Nebel 03ecd24469 Lower the precision of a range of harcoded password queries to remove them from query suites.
2025-05-19 09:26:45 +02:00
..
CVE-2018-1281
Python: Change all remaining occurrences of StrConst
2024-04-22 12:00:09 +00:00
CWE-020
Fix cwe tags to include leading zero
2025-04-30 16:43:03 +01:00
CWE-020-ExternalAPIs
Fix cwe tags to include leading zero
2025-04-30 16:43:03 +01:00
CWE-022
Python: Move TarSlip to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-074
Apply suggestions from docs review
2024-12-09 19:58:00 +00:00
CWE-078
Python: Move CommandInjection to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-079
Python: Move ReflectedXss to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-089
Python: Move SqlInjection to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-090
Python: Move LdapInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-094
Python: Move CodeInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-113
Rename to response splitting
2024-04-24 14:05:40 +01:00
CWE-116
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
CWE-117
Python: Move LogInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-209
Python: Move StackTraceExposure to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-215
Python: Rewrite py/flask-debug
2022-10-04 20:41:18 +02:00
CWE-285
Python: Move PamAuthorization to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-295
Python: Expand modeling of paramiko
2023-04-18 11:57:20 +02:00
CWE-312
add new qhelp for clear-text-logging
2023-09-07 12:39:13 +02:00
CWE-326
update EC key size in help file
2022-12-01 11:56:44 -05:00
CWE-327
Python: resolve remaining TODOs
2025-02-06 10:27:56 +01:00
CWE-352
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CWE-377
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
Python: Move UnsafeDeserialization to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-601
Update qhelp with https:/example.com handling
2024-06-03 10:17:10 +02:00
CWE-611
Python: Move Xxe to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-614
Update InsecureCookie.qhelp
2024-10-30 09:34:49 +00:00
CWE-643
Python: Move XpathInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-730
Python: implement for polynomial redos
2025-02-06 10:27:45 +01:00
CWE-732
merge in main
2022-06-23 09:05:32 +00:00
CWE-776
Python: Move XmlBomb to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-798
Lower the precision of a range of harcoded password queries to remove them from query suites.
2025-05-19 09:26:45 +02:00
CWE-918
Add more choices to SSRF remediation
2025-02-25 00:16:48 -08:00
CWE-943
Python: Add precision to NoSQL query
2024-02-26 11:23:43 +01:00