Napalys Klicius d122534398 Merge pull request #20671 from github/napalys/adjust_query_severity ...

Adjust query severity ratings

2025-11-11 12:37:31 +01:00

..

CVE-2018-1281

Python: Change all remaining occurrences of StrConst

2024-04-22 12:00:09 +00:00

CWE-020

CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

2025-10-22 11:32:33 +00:00

CWE-020-ExternalAPIs

Fix cwe tags to include leading zero

2025-04-30 16:43:03 +01:00

CWE-022

Python: Move TarSlip to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-074

Apply suggestions from docs review

2024-12-09 19:58:00 +00:00

CWE-078

Python: Move CommandInjection to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-079

Python: Move ReflectedXss to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-089

Python: Move SqlInjection to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-090

Python: Move LdapInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-094

Python: Move CodeInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-113

Rename to response splitting

2024-04-24 14:05:40 +01:00

CWE-116

introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder

2023-05-01 10:42:13 +02:00

CWE-117

Python: Move LogInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-209

Python: Move StackTraceExposure to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-215

Python: Rewrite py/flask-debug

2022-10-04 20:41:18 +02:00

CWE-285

Python: Move PamAuthorization to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-295

Python: Expand modeling of paramiko

2023-04-18 11:57:20 +02:00

CWE-312

add new qhelp for clear-text-logging

2023-09-07 12:39:13 +02:00

CWE-326

update EC key size in help file

2022-12-01 11:56:44 -05:00

CWE-327

Remove hashing example when not covered by query

2025-10-08 16:48:57 +01:00

CWE-352

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

CWE-377

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-502

Python: Move UnsafeDeserialization to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-601

Update qhelp with https:/example.com handling

2024-06-03 10:17:10 +02:00

CWE-611

Python: Move Xxe to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-614

Update documentation

2025-09-23 15:50:27 +01:00

CWE-643

Python: Move XpathInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-730

Python: implement for polynomial redos

2025-02-06 10:27:45 +01:00

CWE-732

merge in main

2022-06-23 09:05:32 +00:00

CWE-776

Python: Move XmlBomb to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-798

Lower the precision of a range of harcoded password queries to remove them from query suites.

2025-05-19 09:26:45 +02:00

CWE-918

Add more choices to SSRF remediation

2025-02-25 00:16:48 -08:00

CWE-943

Python: Add precision to NoSQL query

2024-02-26 11:23:43 +01:00

CWE-1004

Update alert message

2025-09-25 09:52:27 +01:00

CWE-1275

Update documentation

2025-09-23 15:50:27 +01:00