hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 20:56:33 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
180e752a23892f1ae166efd70cedec62f7dde419
codeql/python/ql/src/Security
History
Rasmus Wriedt Larsen 43d9d2ceb7 Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link 
JavaScript/Python/Ruby: Improve alert message for `*/weak-cryptographic-algorithm`.
2023-11-08 14:29:24 +01:00
..
CVE-2018-1281
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-020
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
CWE-020-ExternalAPIs
Python: Move UntrustedDataToExternalAPI to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-022
Python: Move TarSlip to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-078
Python: Move CommandInjection to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-079
Python: Move ReflectedXss to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-089
Python: Move SqlInjection to new dataflow API
2023-08-28 15:27:49 +02:00
CWE-090
Python: Move LdapInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-094
Python: Move CodeInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-116
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
CWE-117
Python: Move LogInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-209
Python: Move StackTraceExposure to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-215
Python: Rewrite py/flask-debug
2022-10-04 20:41:18 +02:00
CWE-285
Python: Move PamAuthorization to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-295
Python: Expand modeling of paramiko
2023-04-18 11:57:20 +02:00
CWE-312
add new qhelp for clear-text-logging
2023-09-07 12:39:13 +02:00
CWE-326
update EC key size in help file
2022-12-01 11:56:44 -05:00
CWE-327
Address review comment.
2023-10-27 10:19:28 +01:00
CWE-352
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CWE-377
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
Python: Move UnsafeDeserialization to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-601
Python: Move UrlRedirect to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-611
Python: Move Xxe to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-643
Python: Move XpathInjection to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-730
Update dead link.
2023-11-07 09:26:07 +00:00
CWE-732
merge in main
2022-06-23 09:05:32 +00:00
CWE-776
Python: Move XmlBomb to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-798
Python: Move HardcodedCredentials to new dataflow API
2023-08-28 15:27:50 +02:00
CWE-918
Python: Fix typo in SSRF example
2023-09-07 09:45:02 +02:00
CWE-943
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00