hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
3e6629d007117ea7775cbd09dcd81f119fb66a84
codeql/change-notes/1.22/analysis-python.md
Mark Shannon fbe20a96dc Python: Add change note for tarslip query.
2019-06-27 14:48:37 +01:00

425 B
Raw Blame History

Improvements to Python analysis

General improvements

Impact on existing queries.

New queries

Query Tags Purpose
Arbitrary file write during tarfile extraction (py/tarslip) security, external/cwe/cwe-022 Finds instances where extracting from a tar archive can result in arbitrary file writes. Results are not shown on LGTM by default.