hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-30 09:05:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
4fbb02d4e17f7aa033670a408e4c18db9d98d6f3
codeql/python/ql/test/query-tests/Security
History
Sotiris Dragonas 4fbb02d4e1 Merge branch 'main' into bazookamusic/python-prompt-injection
2026-06-29 10:30:22 +03:00
..
CVE-2018-1281
Update test results
2026-05-22 11:43:18 +01:00
CWE-020-CookieInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-ExternalAPIs
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-IncompleteHostnameRegExp
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-IncompleteUrlSubstringSanitization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-SuspiciousRegexpRange
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-022-PathInjection
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-022-TarSlip
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-074-TemplateInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-CommandInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-CommandInjection-py2
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-UnsafeShellCommandConstruction
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-079-Jinja2WithoutEscaping
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-079-ReflectedXss
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-089-SqlInjection
Fix MISSING alert
2026-06-15 00:14:52 +01:00
CWE-089-SqlInjection-local-threat-model
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-090-LdapInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-094-CodeInjection
Python: Update all test util paths to point to the new location.
2024-12-12 13:54:30 +01:00
CWE-113-HeaderInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-116-BadTagFilter
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-117-LogInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-209-StackTraceExposure
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-215-FlaskDebug
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-285-PamAuthorization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-295-MissingHostKeyValidation
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-295-RequestWithoutValidation
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextLogging
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextStorage
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextStorage-py3
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-326-WeakCryptoKey
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-BrokenCryptoAlgorithm
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-InsecureDefaultProtocol
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-InsecureProtocol
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-WeakSensitiveDataHashing
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-377-InsecureTemporaryFile
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-502-UnsafeDeserialization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-601-UrlRedirect
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-611-Xxe
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-614-InsecureCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-643-XPathInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-PolynomialReDoS
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-ReDoS
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-RegexInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-732-WeakFilePermissions
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-776-XmlBomb
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-798-HardcodedCredentials
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-918-ServerSideRequestForgery
Python: adjust test expectations
2026-05-21 16:58:51 +01:00
CWE-942-CorsMisconfigurationMiddleware
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-943-NoSqlInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-1004-NonHttpOnlyCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-1275-SameSiteNoneCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-1427-SystemPromptInjection
Add additional Python prompt-injection sinks for uncovered SDK methods
2026-06-18 17:02:14 +03:00
CWE-1427-UserPromptInjection
Add additional Python prompt-injection sinks for uncovered SDK methods
2026-06-18 17:02:14 +03:00