hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-12 05:01:06 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
0222159df5aaf9a43f257e9a16dc165a41b11a4d
codeql/python/ql/src/Security
History
Owen Mansel-Chan ef6332c581 Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
..
CVE-2018-1281
Python: Change all remaining occurrences of StrConst
2024-04-22 12:00:09 +00:00
CWE-020
CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0
2025-10-22 11:32:33 +00:00
CWE-020-ExternalAPIs
Use more flowTo.
2025-12-03 14:12:08 +01:00
CWE-022
Python: Move TarSlip to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-074
Apply suggestions from docs review
2024-12-09 19:58:00 +00:00
CWE-078
Python: Move CommandInjection to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-079
Python: Move ReflectedXss to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-089
Python: Move SqlInjection to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-090
Python: Move LdapInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-094
Python: Move CodeInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-113
Rename to response splitting
2024-04-24 14:05:40 +01:00
CWE-116
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
CWE-117
Python: Move LogInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-209
Python: Move StackTraceExposure to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-215
Python: Rewrite py/flask-debug
2022-10-04 20:41:18 +02:00
CWE-285
Python: Move PamAuthorization to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-295
Python: Expand modeling of paramiko
2023-04-18 11:57:20 +02:00
CWE-312
add new qhelp for clear-text-logging
2023-09-07 12:39:13 +02:00
CWE-326
update EC key size in help file
2022-12-01 11:56:44 -05:00
CWE-327
Remove hashing example when not covered by query
2025-10-08 16:48:57 +01:00
CWE-352
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CWE-377
…
CWE-502
Python: Move UnsafeDeserialization to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-601
Update qhelp with https:/example.com handling
2024-06-03 10:17:10 +02:00
CWE-611
Python: Move Xxe to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-614
Update documentation
2025-09-23 15:50:27 +01:00
CWE-643
Python: Move XpathInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-730
Python: implement for polynomial redos
2025-02-06 10:27:45 +01:00
CWE-732
merge in main
2022-06-23 09:05:32 +00:00
CWE-776
Python: Move XmlBomb to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-798
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
CWE-918
Add more choices to SSRF remediation
2025-02-25 00:16:48 -08:00
CWE-943
Python: Add precision to NoSQL query
2024-02-26 11:23:43 +01:00
CWE-1004
Remove trailing periods from @name metadata in query files
2025-11-26 14:29:51 +00:00
CWE-1275
Remove trailing periods from @name metadata in query files
2025-11-26 14:29:51 +00:00