hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
bca479c2f30a92b225a00bcc94eaeb349832a63c
codeql/python/ql/src/Security
History
Rasmus Wriedt Larsen 5a90214ece Merge pull request #7783 from yoff/python/promote-ldap-injection 
Python: promote LDAP injection query
2022-02-15 10:24:18 +01:00
..
CVE-2018-1281
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-020
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-020-ExternalAPIs
Python: Always use @id py/
2021-11-10 10:40:17 +01:00
CWE-022
python: Rewrite path injection to use flow state
2022-01-21 09:26:48 +01:00
CWE-078
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-079
Python: Port py/reflective-xss to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-089
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-090
python: more detailed alert message
2022-02-14 11:55:07 +01:00
CWE-094
Python/Ruby: Remove owasp tags
2021-11-16 12:03:50 +01:00
CWE-116
JS/Py/Ruby: Add more CWEs to bad-tag-filter queries
2021-12-13 10:23:24 +01:00
CWE-209
Python: Port py/stack-trace-exposure to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-215
Python: Add TypeTrackingNode
2021-07-02 18:00:33 +00:00
CWE-295
Python: Use backtracker for verify arg
2021-11-10 12:54:23 +01:00
CWE-312
Python: Add CWE-532 to CleartextLogging
2021-11-24 14:59:52 +01:00
CWE-326
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-327
remove duplicated spaces in qldoc
2022-01-04 21:03:06 +01:00
CWE-377
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
Python: Port py/unsafe-deserialization to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-601
Python: Port py/url-redirection to use proper source/sink customization
2021-07-12 16:22:10 +02:00
CWE-730
Python: Fix RegexInjection query, add old deprecated versions
2022-01-19 17:22:44 +01:00
CWE-732
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-798
Python: Replace '.prefix'/'.suffix' with '.matches'.
2021-10-13 13:23:12 +01:00
CWE-918
Python: Add SSRF qhelp
2021-12-17 11:48:26 +01:00