hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-03 12:50:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
d2f474d998802eee8172fa9cdc0c12cbbda51236
codeql/go/ql/src/Security
History
Owen Mansel-Chan 056aa342fe Change @security-severity for log injection queries from 7.8 to 6.1
2026-03-13 10:02:01 +00:00
..
CWE-020
Use shared getASuccessor and getAPredecessor
2026-01-28 22:12:23 +00:00
CWE-022
Apply suggestions from code review
2024-03-22 15:24:29 +00:00
CWE-078
changes based on review, and improve the new command-injection test
2024-05-17 08:38:54 +02:00
CWE-079
Change @security-severity for XSS queries from 6.1 to 7.8
2026-03-13 10:01:02 +00:00
CWE-089
Apply suggestions from code review
2024-03-25 19:48:56 +00:00
CWE-117
Change @security-severity for log injection queries from 7.8 to 6.1
2026-03-13 10:02:01 +00:00
CWE-190
Make AllocationSizeOverflow use new API
2023-08-10 15:48:44 +01:00
CWE-209
Fix misspelling in comment
2026-01-14 11:50:55 +00:00
CWE-295
Non-initializing writes should target post-update nodes
2025-10-01 16:12:54 +01:00
CWE-312
Make ClearTextLogging use new API
2023-08-10 15:48:59 +01:00
CWE-322
Delete WriteNode.writesFieldOnSsaWithFields
2025-10-01 16:13:27 +01:00
CWE-326
Go/InsufficientKeySize
2025-10-28 09:39:27 +01:00
CWE-327
Correct comment about AES crypto algorithm strength
2026-03-11 09:27:03 -05:00
CWE-338
Go: Implement new data flow interface
2024-03-13 14:41:57 +01:00
CWE-347
Apply suggestions from code review
2024-02-19 08:59:03 +01:00
CWE-352
Use type cast to make QL more succinct
2026-01-14 11:50:56 +00:00
CWE-601
Use more flowTo.
2025-12-03 14:12:08 +01:00
CWE-614
Split SecureCookies into query specific files
2025-11-25 14:35:47 +00:00
CWE-640
Go: mass enable diff-informed data flow
2025-06-11 18:44:24 +02:00
CWE-643
Make XPathInjection use new API
2023-08-10 15:49:21 +01:00
CWE-681
Fix IncorrectIntegerConversion for use-use flow
2025-10-01 16:12:19 +01:00
CWE-770
Update go/ql/src/Security/CWE-770/UncontrolledAllocationSize.ql
2024-03-11 15:53:40 +01:00
CWE-798
Lower the precision of a range of harcoded password queries to remove them from query suites.
2025-05-19 09:26:45 +02:00
CWE-918
Use more flowTo.
2025-12-03 14:12:08 +01:00
CWE-1004
Split SecureCookies into query specific files
2025-11-25 14:35:47 +00:00