hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-09 13:35:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
545d54158802360339144a047ac1b7debe529f0a
codeql/python/ql/test/query-tests/Security
History
Geoffrey White 8bb12d1507 Merge pull request #22005 from github/dependabot/pip/misc/codegen/pip-02f7ad5a4b 
Bump the pip group across 2 directories with 2 updates
2026-07-08 14:37:05 +01:00
..
CVE-2018-1281
Update test results
2026-05-22 11:43:18 +01:00
CWE-020-CookieInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-ExternalAPIs
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-IncompleteHostnameRegExp
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-IncompleteUrlSubstringSanitization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-SuspiciousRegexpRange
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-022-PathInjection
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-022-TarSlip
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-074-TemplateInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-CommandInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-CommandInjection-py2
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-UnsafeShellCommandConstruction
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-079-Jinja2WithoutEscaping
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-079-ReflectedXss
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-089-SqlInjection
Python: hotfix - disable instanceFieldStep to avoid type-tracker blowup
2026-06-30 14:41:12 +00:00
CWE-089-SqlInjection-local-threat-model
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-090-LdapInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-094-CodeInjection
Python: Update all test util paths to point to the new location.
2024-12-12 13:54:30 +01:00
CWE-113-HeaderInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-116-BadTagFilter
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-117-LogInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-209-StackTraceExposure
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-215-FlaskDebug
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-285-PamAuthorization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-295-MissingHostKeyValidation
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-295-RequestWithoutValidation
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextLogging
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextStorage
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextStorage-py3
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-326-WeakCryptoKey
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-BrokenCryptoAlgorithm
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-InsecureDefaultProtocol
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-InsecureProtocol
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-WeakSensitiveDataHashing
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-377-InsecureTemporaryFile
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-502-UnsafeDeserialization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-601-UrlRedirect
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-611-Xxe
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-614-InsecureCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-643-XPathInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-PolynomialReDoS
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-ReDoS
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-RegexInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-732-WeakFilePermissions
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-776-XmlBomb
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-798-HardcodedCredentials
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-918-ServerSideRequestForgery
Python: adjust test expectations
2026-05-21 16:58:51 +01:00
CWE-942-CorsMisconfigurationMiddleware
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-943-NoSqlInjection
Merge pull request #22005 from github/dependabot/pip/misc/codegen/pip-02f7ad5a4b
2026-07-08 14:37:05 +01:00
CWE-1004-NonHttpOnlyCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-1275-SameSiteNoneCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00