hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 12:46:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
243c5924475820a44ffc75ab46a97479a4561d7f
codeql/python/ql/src/Security
History
erik-krogh 3a436d1f84 do a quick-and-dirty conversion of py/hardcoded-credentials to the new dataflow library
2023-06-14 08:31:56 +02:00
..
CVE-2018-1281
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-020
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
CWE-020-ExternalAPIs
delete old deprecations
2023-06-09 15:12:23 +02:00
CWE-022
Python: Update a few examples so queries work on them
2023-02-14 11:54:18 +01:00
CWE-078
lower precision of py/shell-command-constructed-from-input to medium
2023-03-13 14:56:42 +01:00
CWE-079
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-089
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-090
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-094
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-116
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
CWE-117
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-209
fix capitalization in stack-trace-exposure
2022-10-11 13:59:10 +02:00
CWE-215
Python: Rewrite py/flask-debug
2022-10-04 20:41:18 +02:00
CWE-285
Python: Use ' instead of ` in select text
2022-11-29 14:47:45 +01:00
CWE-295
Python: Expand modeling of paramiko
2023-04-18 11:57:20 +02:00
CWE-312
changes to address reviews
2022-10-07 22:31:00 +02:00
CWE-326
update EC key size in help file
2022-12-01 11:56:44 -05:00
CWE-327
Merge branch 'main' into python/rewrite-InsecureContextConfiguration
2023-03-27 10:20:53 +02:00
CWE-352
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CWE-377
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
Update py/unsafe-deserialization name
2023-06-02 17:57:24 +02:00
CWE-601
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-611
Merge pull request #10743 from jsoref/spelling
2022-10-12 12:48:22 +02:00
CWE-643
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-730
also fix the first code-block
2023-05-25 13:56:29 +02:00
CWE-732
merge in main
2022-06-23 09:05:32 +00:00
CWE-776
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-798
do a quick-and-dirty conversion of py/hardcoded-credentials to the new dataflow library
2023-06-14 08:31:56 +02:00
CWE-918
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00