hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 00:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
9dcb61e771814a03d3a072cbc92f7fbe04615838
codeql/javascript/ql/test/query-tests/Security
History
Asger F 9dcb61e771 JS: Remove js/actions/actions-artifact-leak 
Superseded by actions/secrets-in-artifacts
2025-06-23 14:39:28 +02:00
..
CWE-020
raw test output
2025-02-28 13:29:39 +01:00
CWE-022
Applied copilot suggestion.
2025-04-10 14:13:48 +02:00
CWE-073
raw test output
2025-02-28 13:29:39 +01:00
CWE-078
Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource
2025-05-01 11:14:15 +02:00
CWE-079
JS: track taint through serialize-javascript calls with object arguments
2025-06-16 10:38:20 +02:00
CWE-089
Add test case to ensure exec calls without middleware injection into Express are not flagged.
2025-03-30 14:09:15 +02:00
CWE-094
Added support for fastify.all
2025-04-30 14:54:09 +02:00
CWE-116
Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js
2025-03-10 14:19:33 +01:00
CWE-117
raw test output
2025-02-28 13:29:39 +01:00
CWE-134
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-178
raw test output
2025-02-28 13:29:39 +01:00
CWE-200
Applied copilot suggestions.
2025-03-28 13:19:11 +01:00
CWE-201
raw test output
2025-02-28 13:29:39 +01:00
CWE-209
raw test output
2025-02-28 13:29:39 +01:00
CWE-295
raw test output
2025-02-28 13:29:39 +01:00
CWE-300
raw test output
2025-02-28 13:29:39 +01:00
CWE-312
JS: Remove js/actions/actions-artifact-leak
2025-06-23 14:39:28 +02:00
CWE-313
raw test output
2025-02-28 13:29:39 +01:00
CWE-326
raw test output
2025-02-28 13:29:39 +01:00
CWE-327
raw test output
2025-02-28 13:29:39 +01:00
CWE-338
raw test output
2025-02-28 13:29:39 +01:00
CWE-346
raw test output
2025-02-28 13:29:39 +01:00
CWE-347
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-352
raw test output
2025-02-28 13:29:39 +01:00
CWE-367
raw test output
2025-02-28 13:29:39 +01:00
CWE-377
raw test output
2025-02-28 13:29:39 +01:00
CWE-384
raw test output
2025-02-28 13:29:39 +01:00
CWE-400
Javascript: Update test files.
2025-04-23 15:41:41 +02:00
CWE-451
raw test output
2025-02-28 13:29:39 +01:00
CWE-502
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-506
raw test output
2025-02-28 13:29:39 +01:00
CWE-522-DecompressionBombs
Add TypedArrays flow summaries for Uint8Array and buffer property
2025-04-07 15:15:24 +02:00
CWE-598
raw test output
2025-02-28 13:29:39 +01:00
CWE-601
raw test output
2025-02-28 13:29:39 +01:00
CWE-611
JS: Remove duplicate '$ Alert' in libxml test
2025-03-10 14:23:44 +01:00
CWE-614
raw test output
2025-02-28 13:29:39 +01:00
CWE-640
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-643
raw test output
2025-02-28 13:29:39 +01:00
CWE-693
raw test output
2025-02-28 13:29:39 +01:00
CWE-730
Update javascript/ql/test/query-tests/Security/CWE-730/server-crash.js
2025-03-10 14:21:46 +01:00
CWE-754
raw test output
2025-02-28 13:29:39 +01:00
CWE-770
raw test output
2025-02-28 13:29:39 +01:00
CWE-776
raw test output
2025-02-28 13:29:39 +01:00
CWE-798
Updated modeling of aws-sdk with MaD
2025-04-28 14:00:12 +02:00
CWE-807
raw test output
2025-02-28 13:29:39 +01:00
CWE-829
raw test output
2025-02-28 13:29:39 +01:00
CWE-830
raw test output
2025-02-28 13:29:39 +01:00
CWE-834
raw test output
2025-02-28 13:29:39 +01:00
CWE-843
raw test output
2025-02-28 13:29:39 +01:00
CWE-862
raw test output
2025-02-28 13:29:39 +01:00
CWE-912
Added NodeJSFileSystemVectorWrite class for vectored write.
2025-03-28 13:07:23 +01:00
CWE-915
raw test output
2025-02-28 13:29:39 +01:00
CWE-916
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-918
Merge pull request #19784 from Napalys/js/express_middleware
2025-06-20 15:36:26 +02:00
CWE-1004
raw test output
2025-02-28 13:29:39 +01:00
CWE-1275
raw test output
2025-02-28 13:29:39 +01:00