Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
998
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
test
experimental
stubs
on
codeql-cli/v2.13.4
User selector
All users
All time
Commit history
Commits on Aug 13, 2022
Add stubs and tests for new hardcoded-credential sinks
smowton
committed
0a6ccbc
View commit details
Copy full SHA for 0a6ccbc
View code at this point
Browse repository at this point
Commits on Feb 22, 2022
Java : Add SSTI query
Porcuiney Hairs
committed
e536628
View commit details
Copy full SHA for e536628
View code at this point
Browse repository at this point
Commits on Sep 27, 2021
Move from experimental
atorralba
committed
c792567
View commit details
Copy full SHA for c792567
View code at this point
Browse repository at this point
Commits on Aug 5, 2021
Merge pull request #5911 from atorralba/atorralba/promote-missing-jwt-signature-check
Show description for 0356ed7
atorralba
authored
0356ed7
View commit details
Copy full SHA for 0356ed7
View code at this point
Browse repository at this point
Commits on Aug 4, 2021
Merge pull request #5931 from atorralba/atorralba/promote-jndi-injection
Show description for 6a09a56
aschackmull
authored
6a09a56
View commit details
Copy full SHA for 6a09a56
View code at this point
Browse repository at this point
Commits on Aug 3, 2021
Merge pull request #5894 from atorralba/atorralba/promote-ognl-injection
Show description for 7fb1e15
aschackmull
authored
7fb1e15
View commit details
Copy full SHA for 7fb1e15
View code at this point
Browse repository at this point
Commits on Jul 20, 2021
Merge branch 'main' into atorralba/promote-ognl-injection
atorralba
committed
b6904a7
View commit details
Copy full SHA for b6904a7
View code at this point
Browse repository at this point
Merge branch 'main' into atorralba/promote-missing-jwt-signature-check
atorralba
committed
430d9f1
View commit details
Copy full SHA for 430d9f1
View code at this point
Browse repository at this point
Merge branch 'main' into atorralba/promote-jndi-injection
atorralba
committed
b8ea833
View commit details
Copy full SHA for b8ea833
View code at this point
Browse repository at this point
Commits on Jul 19, 2021
Merge branch 'main' into atorralba/promote-groovy-injection
atorralba
committed
b08f417
View commit details
Copy full SHA for b08f417
View code at this point
Browse repository at this point
Commits on Jun 25, 2021
Merge pull request #5811 from mogwailabs/insecureJmxRmiServerEnvironment
Show description for 8aa9cd5
smowton
authored
8aa9cd5
View commit details
Copy full SHA for 8aa9cd5
View code at this point
Browse repository at this point
Commits on Jun 24, 2021
Mobile stubs
haby0
committed
3cf71c5
View commit details
Copy full SHA for 3cf71c5
View code at this point
Browse repository at this point
Commits on Jun 17, 2021
Promote SSRF query to main query set
smowton
committed
487c1db
View commit details
Copy full SHA for 487c1db
View code at this point
Browse repository at this point
Commits on Jun 16, 2021
Merge branch 'main' into atorralba/promote-missing-jwt-signature-check
atorralba
authored
91ba30a
View commit details
Copy full SHA for 91ba30a
View code at this point
Browse repository at this point
Moved from experimental
atorralba
committed
356601c
View commit details
Copy full SHA for 356601c
View code at this point
Browse repository at this point
Commits on Jun 4, 2021
Merged simplified query
smowton
authored and
Timo Mueller
committed
4ddf455
View commit details
Copy full SHA for 4ddf455
View code at this point
Browse repository at this point
Commits on May 25, 2021
Updated test cases to include test for java10+ CREDENTIALS_FILTER_PATTERN constant
Timo Mueller
committed
75f6ec1
View commit details
Copy full SHA for 75f6ec1
View code at this point
Browse repository at this point
Added stup for RMIConnectorServer for valid test case
Timo Mueller
committed
59ebe08
View commit details
Copy full SHA for 59ebe08
View code at this point
Browse repository at this point
Commits on May 19, 2021
Moved JNDI injection related files from experimental to standard
atorralba
committed
1351516
View commit details
Copy full SHA for 1351516
View code at this point
Browse repository at this point
Merge branch 'main' into atorralba/promote-ognl-injection
atorralba
committed
e587465
View commit details
Copy full SHA for e587465
View code at this point
Browse repository at this point
Commits on May 18, 2021
Include more scenarios and update qldoc
luchua-bc
committed
d664aa6
View commit details
Copy full SHA for d664aa6
View code at this point
Browse repository at this point
Rhino code injection
luchua-bc
committed
b0b5338
View commit details
Copy full SHA for b0b5338
View code at this point
Browse repository at this point
Commits on May 17, 2021
Move from experimental to standard
atorralba
committed
3e4ccaf
View commit details
Copy full SHA for 3e4ccaf
View code at this point
Browse repository at this point
Commits on May 11, 2021
Moved from experimental to standard
atorralba
committed
fc03b92
View commit details
Copy full SHA for fc03b92
View code at this point
Browse repository at this point
Commits on May 10, 2021
Merge pull request #5710 from p0wn4j/jsch-os-injection
Show description for 0afe22d
smowton
authored
0afe22d
View commit details
Copy full SHA for 0afe22d
View code at this point
Browse repository at this point
Commits on Apr 29, 2021
Merge pull request #5597 from intrigus-lgtm/java/jwt-insecure-parse
Show description for ad9ea40
smowton
authored
ad9ea40
View commit details
Copy full SHA for ad9ea40
View code at this point
Browse repository at this point
Commits on Apr 28, 2021
Java: Cleanup jwt stubs.
intrigus
committed
a8865e2
View commit details
Copy full SHA for a8865e2
View code at this point
Browse repository at this point
Commits on Apr 26, 2021
[Java] CWE-078: Add JSch OS command injection sink
p0wn4j
committed
3d891f0
View commit details
Copy full SHA for 3d891f0
View code at this point
Browse repository at this point
Commits on Apr 20, 2021
[Java] CWE-094: Query to detect Groovy Code Injections
p0wn4j
committed
f2de440
View commit details
Copy full SHA for f2de440
View code at this point
Browse repository at this point
Commits on Apr 5, 2021
[Java] Add stubs for jwtk-jjwt-0.11.2
intrigus
committed
b7e49c7
View commit details
Copy full SHA for b7e49c7
View code at this point
Browse repository at this point
Commits on Jan 15, 2021
Java: Add tests for different versions.
Show description for a4cbd70
intrigus
committed
a4cbd70
View commit details
Copy full SHA for a4cbd70
View code at this point
Browse repository at this point
Commits on Jan 12, 2021
Java: Add tests and test stubs.
intrigus
committed
b308728
View commit details
Copy full SHA for b308728
View code at this point
Browse repository at this point
Commits on Nov 24, 2020
Java: Review fixes.
aschackmull
committed
0450489
View commit details
Copy full SHA for 0450489
View code at this point
Browse repository at this point
Commits on Nov 9, 2020
add request forgery query
Porcupiney Hairs
committed
38de9b6
View commit details
Copy full SHA for 38de9b6
View code at this point
Browse repository at this point
Commits on Aug 30, 2020
Merge branch 'main' into xslt-injection
ggolawski
committed
5e462a8
View commit details
Copy full SHA for 5e462a8
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.