Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2k
Star
9.9k
Code
Issues
996
Pull requests
443
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jun 22, 2026
Python: deprecate AstNode.getAFlowNode() and rewrite internal callers
Show description for 717ff62
Copilot
authored and
yoff
committed
717ff62
View commit details
Copy full SHA for 717ff62
View code at this point
Browse repository at this point
Commits on May 8, 2026
Note that common standard library types can be vulnerable to gadget-chain attacks
owen-mc
committed
a5ef036
View commit details
Copy full SHA for a5ef036
View code at this point
Browse repository at this point
Python: remove doubles spaces from qhelp
owen-mc
committed
93e05db
View commit details
Copy full SHA for 93e05db
View code at this point
Browse repository at this point
Python: Clarify that deserialization following a schema is safe
owen-mc
committed
e2874ac
View commit details
Copy full SHA for e2874ac
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Python: Move isNetworkBind check into isSink
tausbn
committed
187f7c7
View commit details
Copy full SHA for 187f7c7
View code at this point
Browse repository at this point
Python: Exclude `AF_UNIX` sockets from BindToAllInterfaces
Show description for 4f74d42
tausbn
committed
4f74d42
View commit details
Copy full SHA for 4f74d42
View code at this point
Browse repository at this point
Commits on Mar 26, 2026
Python: Convert BindToAllInterfaces to path-problem
Show description for c9832c3
tausbn
committed
c9832c3
View commit details
Copy full SHA for c9832c3
View code at this point
Browse repository at this point
Python: Replace type tracking with global data-flow
Show description for c439fc5
tausbn
committed
c439fc5
View commit details
Copy full SHA for c439fc5
View code at this point
Browse repository at this point
Commits on Mar 13, 2026
Change @security-severity for log injection queries from 7.8 to 6.1
owen-mc
committed
056aa34
View commit details
Copy full SHA for 056aa34
View code at this point
Browse repository at this point
Change @security-severity for XSS queries from 6.1 to 7.8
owen-mc
committed
f58a6e5
View commit details
Copy full SHA for f58a6e5
View code at this point
Browse repository at this point
Commits on Feb 12, 2026
Rewordings per copilot
smowton
authored
5f970d9
View commit details
Copy full SHA for 5f970d9
View code at this point
Browse repository at this point
Commits on Feb 11, 2026
Enhance path validation recommendations
Show description for bed1ec8
smowton
authored
bed1ec8
View commit details
Copy full SHA for bed1ec8
View code at this point
Browse repository at this point
Commits on Jan 30, 2026
Allow MaD sanitizers for queries with MaD sinks
owen-mc
committed
ef6332c
View commit details
Copy full SHA for ef6332c
View code at this point
Browse repository at this point
Commits on Jan 22, 2026
python: add machinery for MaD barriers
Show description for 3dbfb9f
yoff
committed
3dbfb9f
View commit details
Copy full SHA for 3dbfb9f
View code at this point
Browse repository at this point
Commits on Dec 3, 2025
Use more flowTo.
aschackmull
committed
78e1879
View commit details
Copy full SHA for 78e1879
View code at this point
Browse repository at this point
Commits on Nov 26, 2025
Remove trailing periods from @name metadata in query files
Show description for caf6b95
felicitymay
committed
caf6b95
View commit details
Copy full SHA for caf6b95
View code at this point
Browse repository at this point
Commits on Nov 11, 2025
Merge pull request #20671 from github/napalys/adjust_query_severity
Show description for d122534
Napalys
authored
d122534
View commit details
Copy full SHA for d122534
View code at this point
Browse repository at this point
Commits on Oct 24, 2025
Merge pull request #20494 from joefarebrother/python-insecure-cookie-split
Show description for 8c277bd
joefarebrother
authored
8c277bd
View commit details
Copy full SHA for 8c277bd
View code at this point
Browse repository at this point
Commits on Oct 22, 2025
CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0
Napalys
committed
fa47174
View commit details
Copy full SHA for fa47174
View code at this point
Browse repository at this point
Commits on Oct 8, 2025
Remove hashing example when not covered by query
owen-mc
committed
2f22acd
View commit details
Copy full SHA for 2f22acd
View code at this point
Browse repository at this point
Improve qhelp for broken crypto algo queries
Show description for 0bcdb91
owen-mc
committed
0bcdb91
View commit details
Copy full SHA for 0bcdb91
View code at this point
Browse repository at this point
Remove erroneous comma
owen-mc
committed
2a1c9d8
View commit details
Copy full SHA for 2a1c9d8
View code at this point
Browse repository at this point
Commits on Sep 25, 2025
Update alert message
joefarebrother
committed
cb7b1ef
View commit details
Copy full SHA for cb7b1ef
View code at this point
Browse repository at this point
Commits on Sep 23, 2025
Update documentation
joefarebrother
committed
55fd7c8
View commit details
Copy full SHA for 55fd7c8
View code at this point
Browse repository at this point
Align alert messages across languages.
joefarebrother
committed
1208195
View commit details
Copy full SHA for 1208195
View code at this point
Browse repository at this point
Update and fix tests
joefarebrother
committed
2cffb21
View commit details
Copy full SHA for 2cffb21
View code at this point
Browse repository at this point
Add sensitive data heuristic
joefarebrother
committed
d28e800
View commit details
Copy full SHA for d28e800
View code at this point
Browse repository at this point
Commits on Sep 19, 2025
Rename qhelp file
joefarebrother
committed
6eac6b7
View commit details
Copy full SHA for 6eac6b7
View code at this point
Browse repository at this point
Split test cases for insecure cookie queries
joefarebrother
committed
2e95c2b
View commit details
Copy full SHA for 2e95c2b
View code at this point
Browse repository at this point
Update qhelp
joefarebrother
committed
04316d3
View commit details
Copy full SHA for 04316d3
View code at this point
Browse repository at this point
Commits on Sep 18, 2025
Split insecure cookies queries into 3 queries
joefarebrother
committed
7eabed6
View commit details
Copy full SHA for 7eabed6
View code at this point
Browse repository at this point
Commits on Sep 2, 2025
Apply suggestion from @aschackmull
Show description for 90caded
michaelnebel
and
aschackmull
authored
90caded
View commit details
Copy full SHA for 90caded
View code at this point
Browse repository at this point
Commits on Sep 1, 2025
Python: Fix some Ql4Ql violations.
michaelnebel
committed
dbd3125
View commit details
Copy full SHA for dbd3125
View code at this point
Browse repository at this point
Commits on May 19, 2025
Lower the precision of a range of harcoded password queries to remove them from query suites.
michaelnebel
committed
03ecd24
View commit details
Copy full SHA for 03ecd24
View code at this point
Browse repository at this point
Commits on Apr 30, 2025
Fix cwe tags to include leading zero
owen-mc
committed
cf614a5
View commit details
Copy full SHA for cf614a5
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.