hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 12:46:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
2d0a4c3d83ee6d79c3d8fa3d760a2e3d97f5b33a
codeql/python/ql/src/Security
History
erik-krogh 2d0a4c3d83 update {go/py}/stack-trace-exposure to match javascript
2022-08-22 21:41:46 +02:00
..
CVE-2018-1281
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-020
Merge pull request #9712 from erik-krogh/badRange
2022-08-15 13:55:44 +02:00
CWE-020-ExternalAPIs
fix common misspellings throughout github/codeql
2022-08-10 23:21:41 +02:00
CWE-022
update {rb/py/js/go}/path-injection to match java/csharp
2022-08-22 21:41:45 +02:00
CWE-078
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-079
Python: getAValueReachingRhs -> getAValueReachingSink
2022-06-21 12:44:06 +02:00
CWE-089
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-090
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-094
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-116
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-117
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-209
update {go/py}/stack-trace-exposure to match javascript
2022-08-22 21:41:46 +02:00
CWE-215
refactor uses of API::Node::getAUse() that should have been something else
2022-04-07 13:52:13 +02:00
CWE-285
Python: getAValueReachingRhs -> getAValueReachingSink
2022-06-21 12:44:06 +02:00
CWE-295
Fix link to python requests documentation
2022-08-15 14:43:28 -04:00
CWE-312
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-326
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-327
Python: Rename getAUse -> getAValueReachableFromSource
2022-06-21 12:44:06 +02:00
CWE-352
python: format
2022-05-09 21:22:27 +02:00
CWE-377
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-601
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-611
Python: Move last XXE/XML bomb out of experimental
2022-04-07 15:37:56 +02:00
CWE-643
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CWE-730
rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"
2022-06-23 14:36:25 +02:00
CWE-732
Python: getAValueReachingRhs -> getAValueReachingSink
2022-06-21 12:44:06 +02:00
CWE-776
Python: Apply suggestions from code review
2022-05-09 10:53:25 +02:00
CWE-798
Python: Replace '.prefix'/'.suffix' with '.matches'.
2021-10-13 13:23:12 +01:00
CWE-918
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00