hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-29 23:26:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
26befebfc274527ffc9d8a4451b68c2353e2963c
codeql/python/ql/src/Security
History
Rasmus Lerchedahl Petersen 26befebfc2 python: drop precision and add severity score 
Given both the original FP score and our concerns
regarding sanitizers, `@precision medium`, which
is aligned with other languages, feels appropriate.
2022-02-01 10:34:36 +01:00
..
CVE-2018-1281
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-020
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-020-ExternalAPIs
Python: Always use @id py/
2021-11-10 10:40:17 +01:00
CWE-022
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-078
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-079
Python: Port py/reflective-xss to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-089
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-094
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-116
JS/Py/Ruby: Add more CWEs to bad-tag-filter queries
2021-12-13 10:23:24 +01:00
CWE-117
python: drop precision and add severity score
2022-02-01 10:34:36 +01:00
CWE-209
Python: Port py/stack-trace-exposure to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-215
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-295
Python: Use backtracker for verify arg
2021-11-10 12:54:23 +01:00
CWE-312
Python: Add CWE-532 to CleartextLogging
2021-11-24 14:59:52 +01:00
CWE-326
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-327
remove duplicated spaces in qldoc
2022-01-04 21:03:06 +01:00
CWE-377
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
Python: Port py/unsafe-deserialization to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-601
Python: Port py/url-redirection to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-730
Python: Fix RegexInjection query, add old deprecated versions
2022-01-19 17:22:44 +01:00
CWE-732
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-798
Python: Replace '.prefix'/'.suffix' with '.matches'.
2021-10-13 13:23:12 +01:00
CWE-918
Python: Add SSRF qhelp
2021-12-17 11:48:26 +01:00