codeql

CWE-020

Second pass

2026-06-10 09:14:47 +02:00

CWE-022/semmle/tests

Fix path sanitizer

2026-07-11 07:28:14 +01:00

CWE-023/semmle/tests

Fix bug so += File.separator is recognized

2026-04-19 07:18:42 +01:00

CWE-074

Java: convert XsltInjection test to .qlref

2025-06-24 16:41:43 +02:00

CWE-078

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-079/semmle/tests

Second pass

2026-06-10 09:14:47 +02:00

CWE-089/semmle/examples

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-090

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-094

Second pass

2026-06-10 09:14:47 +02:00

CWE-113/semmle/tests

Add SPURIOUS and MISSING alerts based on existing comments

2026-06-12 21:51:50 +01:00

CWE-117

Update test results (remove SPURIOUS annotations)

2026-02-16 12:03:02 +00:00

CWE-129/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-134/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-190/semmle/tests

Add SPURIOUS and MISSING alerts based on existing comments

2026-06-12 21:51:50 +01:00

CWE-200/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-209/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-266

Java: convert IntentUriPermissionManipulation test to .qlref

2025-06-24 16:41:58 +02:00

CWE-273

[TEST] Java: UnsafeCertTrust: convert test to qlref

2025-07-17 18:58:56 +02:00

CWE-287

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-295

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-297

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-311

Add SPURIOUS and MISSING alerts based on existing comments

2026-06-12 21:51:50 +01:00

CWE-312

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-326

Java: convert InsufficientKeySize test to .qlref

2025-06-24 16:42:02 +02:00

CWE-327/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-330

Java: convert InsecureRandomness test to .qlref

2025-06-24 16:42:04 +02:00

CWE-335/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-338/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-347

Java: convert MissingJWTSignatureCheck test to .qlref

2025-06-24 16:42:06 +02:00

CWE-352

Java: rename springframework stubs directory from 5.3.8 to 5.8.x

2025-03-11 15:20:58 -04:00

CWE-367/semmle/tests

Fix test output

2025-03-14 11:44:00 +00:00

CWE-421/semmle

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-441

Java: convert UnsafeContentUriResolution test to .qlref

2025-06-24 16:42:08 +02:00

CWE-470

Java: convert FragmentInjection test to .qlref

2025-06-24 16:42:10 +02:00

CWE-489

Java: convert WebviewDebuggingEnabled test to .qlref

2025-06-24 16:42:12 +02:00

CWE-501

Add @Pattern annotation test case and javax-validation-constraints stub

2026-04-04 22:04:05 +08:00

CWE-502

Use MaD models for unsafe deserialization sinks when possible

2025-07-16 14:42:07 +01:00

CWE-522

Java: convert CWE-522 tests to .qlref

2025-06-24 16:42:17 +02:00

CWE-524

Add space before $ in xml test file

2026-03-04 15:03:24 +00:00

CWE-532

Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer

2026-04-29 20:59:59 +08:00

CWE-552

Java: convert UrlForward test to .qlref

2025-06-24 16:42:19 +02:00

CWE-601/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-611

Java: Add XXE sink model for Woodstox WstxInputFactory

2026-04-17 18:46:51 +04:00

CWE-643

Java: convert XPathInjection test to .qlref

2025-06-24 16:42:23 +02:00

CWE-676/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-681/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-730

Java: convert PolynomialReDoS and RegexInjection tests to .qlref

2025-06-24 16:42:26 +02:00

CWE-732/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-749

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-780

Java: convert RsaWithoutOaep test to .qlref

2025-06-24 16:42:28 +02:00

CWE-798/semmle/tests

Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java

2026-01-14 11:50:52 +01:00

CWE-807/semmle/tests

Second pass

2026-06-10 09:14:47 +02:00

CWE-829/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-833/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-835/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-917

Java: convert OgnlInjection test to .qlref

2025-06-24 16:42:30 +02:00

CWE-918

Java: Model Spring reactive WebClient.uri as a request forgery sink

2026-07-07 13:30:48 -07:00

CWE-925

Java: convert ImproperIntentVerification test to .qlref

2025-06-24 16:42:35 +02:00

CWE-926

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-927

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-940

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-1004

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-1104/semmle/tests

First pass converting qlref tests to inline expectation with postprocess

2026-06-10 07:46:42 +02:00

CWE-1204

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00