hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-10 05:00:29 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
44935cef63663148dd5fdec9f1018b1e2096af80
codeql/java/ql/src/Security/CWE
History
Tony Torralba 5442cdb49c Merge pull request #14610 from atorralba/atorralba/java/jms-deserialization 
Java: Add JMS sink to java/unsafe-deserialization
2023-11-08 09:10:20 +01:00
..
CWE-020
Refactor ExternalAPIs.qll
2023-03-29 22:33:08 -04:00
CWE-022
Adjust ZipSlip query description according to review suggestions.
2023-06-19 10:27:41 +02:00
CWE-023
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-074
Refactor to DataFlow::Global
2023-03-24 10:04:46 -04:00
CWE-078
Convert all command injection sinks to MaD format
2023-05-25 11:41:32 +02:00
CWE-079
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-089
Add SqlTaintedLocalQuery
2023-05-04 10:14:59 -04:00
CWE-090
Move LdapInjectionLib to LdapInjectionQuery.qll
2023-03-29 17:59:33 -04:00
CWE-094
Move InsecureBeanValidation configuration to Query.qll
2023-03-29 17:59:33 -04:00
CWE-113
Add ResponseSplittingLocalQuery
2023-05-04 10:15:00 -04:00
CWE-117
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-129
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
CWE-134
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
CWE-190
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
CWE-200
Autoformat
2023-10-24 11:06:19 +01:00
CWE-209
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
CWE-266
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-273
Refactor UnsafeCertTrustQuery
2023-03-29 22:33:08 -04:00
CWE-295
Refactor InsecureTrustManager
2023-03-29 22:33:09 -04:00
CWE-297
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-312
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-319
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-326
Refactor InsufficientKeySize
2023-03-29 22:33:09 -04:00
CWE-327
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
CWE-335
Mass rename L/RValue -> VarWrite/Read
2023-10-24 10:58:29 +01:00
CWE-338
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-347
Java: Further alert message improvement
2023-09-18 12:25:31 +02:00
CWE-352
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-367
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-421
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-441
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-470
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-489
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-501
Apply docs review suggestions
2023-08-17 13:05:38 -04:00
CWE-502
Java: Add JMS sink to java/unsafe-deserialization
2023-10-26 16:46:19 +02:00
CWE-522
Refactor InsecureBasicAuth
2023-03-29 22:33:09 -04:00
CWE-524
Apply suggestion from docs review
2022-11-16 10:54:14 +00:00
CWE-532
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-601
Add UrlRedirectLocalQuery.qll
2023-05-04 10:14:59 -04:00
CWE-611
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-614
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-643
Add XPathInjectionQuery
2023-05-04 10:14:59 -04:00
CWE-676
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-681
Add NumericCastTaintedQuery
2023-05-04 10:25:13 -04:00
CWE-730
Update dead link.
2023-11-07 09:26:07 +00:00
CWE-732
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-780
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-798
Add aliases for public, importable renamed classes and predicates.
2023-10-24 10:54:35 +01:00
CWE-807
Autoformat
2023-10-24 11:06:19 +01:00
CWE-829
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
CWE-833
Autoformat
2023-10-24 11:06:19 +01:00
CWE-835
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-917
Refactor to DataFlow::Global
2023-03-24 10:04:46 -04:00
CWE-918
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-925
spelling: receiver
2022-10-12 04:40:26 -04:00
CWE-926
Reword first sentence of documentation
2022-10-11 11:02:37 -04:00
CWE-927
Deprecate sensitiveResultReceiver
2023-04-13 23:06:16 -04:00
CWE-940
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-1104
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-1204
Refactor StaticInitializationVector
2023-03-29 22:33:09 -04:00