Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2k
Star
9.9k
Code
Issues
996
Pull requests
443
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
CWE-022
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Feb 12, 2026
Rewordings per copilot
smowton
authored
5f970d9
View commit details
Copy full SHA for 5f970d9
View code at this point
Browse repository at this point
Commits on Feb 11, 2026
Enhance path validation recommendations
Show description for bed1ec8
smowton
authored
bed1ec8
View commit details
Copy full SHA for bed1ec8
View code at this point
Browse repository at this point
Commits on Aug 28, 2023
Python: Move `TarSlip` to new dataflow API
RasmusWL
committed
d4e4e2d
View commit details
Copy full SHA for d4e4e2d
View code at this point
Browse repository at this point
Python: Move `PathInjection` to new dataflow API
RasmusWL
committed
e970329
View commit details
Copy full SHA for e970329
View code at this point
Browse repository at this point
Commits on Feb 14, 2023
Python: Update a few examples so queries work on them
Show description for dc5bb4f
RasmusWL
committed
dc5bb4f
View commit details
Copy full SHA for dc5bb4f
View code at this point
Browse repository at this point
Commits on Oct 7, 2022
fix some more style-guide violations in the alert-messages
erik-krogh
committed
944ca4a
View commit details
Copy full SHA for 944ca4a
View code at this point
Browse repository at this point
Commits on Sep 2, 2022
change alert messages of path queries to use the same template
erik-krogh
committed
089ce5a
View commit details
Copy full SHA for 089ce5a
View code at this point
Browse repository at this point
Commits on Aug 22, 2022
update {rb/py/js/go}/path-injection to match java/csharp
erik-krogh
committed
3553f3d
View commit details
Copy full SHA for 3553f3d
View code at this point
Browse repository at this point
Commits on Jun 28, 2022
python: update use of barrier guard
yoff
authored
834d260
View commit details
Copy full SHA for 834d260
View code at this point
Browse repository at this point
Commits on Jun 14, 2022
python: Straight port of tarslip
yoff
committed
7b5d9ec
View commit details
Copy full SHA for 7b5d9ec
View code at this point
Browse repository at this point
Commits on May 11, 2022
PY: fix ql/field-only-used-in-charpred warning
erik-krogh
committed
f5329a3
View commit details
Copy full SHA for f5329a3
View code at this point
Browse repository at this point
fix all `ql/counting-to-zero` in some languages
erik-krogh
committed
94a9b3e
View commit details
Copy full SHA for 94a9b3e
View code at this point
Browse repository at this point
Commits on Mar 21, 2022
Python: Deprecate old non-Query.qll dataflow defs
RasmusWL
committed
695553b
View commit details
Copy full SHA for 695553b
View code at this point
Browse repository at this point
Commits on Mar 7, 2022
Python: Fix up a bunch of function QLDoc
tausbn
authored
af7f532
View commit details
Copy full SHA for af7f532
View code at this point
Browse repository at this point
Commits on Jan 21, 2022
python: Rewrite path injection to use flow state
Show description for a5bc537
yoff
committed
a5bc537
View commit details
Copy full SHA for a5bc537
View code at this point
Browse repository at this point
Commits on Nov 16, 2021
Python/Ruby: Remove owasp tags
Show description for 98e6fc8
RasmusWL
committed
98e6fc8
View commit details
Copy full SHA for 98e6fc8
View code at this point
Browse repository at this point
Commits on Jun 15, 2021
Update security-severity scores
calumgrant
committed
771e686
View commit details
Copy full SHA for 771e686
View code at this point
Browse repository at this point
Commits on Jun 10, 2021
Add security-severity metadata
calumgrant
committed
a594afb
View commit details
Copy full SHA for a594afb
View code at this point
Browse repository at this point
Commits on Feb 17, 2021
Revert "Merge pull request #5171 from RasmusWL/restructure-queries"
Show description for 7afe397
RasmusWL
committed
7afe397
View commit details
Copy full SHA for 7afe397
View code at this point
Browse repository at this point
Commits on Feb 16, 2021
Python: Restructure query file location
Show description for 3a18881
RasmusWL
committed
3a18881
View commit details
Copy full SHA for 3a18881
View code at this point
Browse repository at this point
Commits on Dec 8, 2020
Python: Reword qhelp text
Show description for 9765598
RasmusWL
and
felicitymay
authored
9765598
View commit details
Copy full SHA for 9765598
View code at this point
Browse repository at this point
Commits on Dec 3, 2020
Python: Highlight os.path.join behavior with absolute paths
RasmusWL
committed
e53ed47
View commit details
Copy full SHA for e53ed47
View code at this point
Browse repository at this point
Commits on Nov 6, 2020
Python: Move PathInjection configuration to own file
Show description for 1897a0d
RasmusWL
committed
1897a0d
View commit details
Copy full SHA for 1897a0d
View code at this point
Browse repository at this point
Commits on Nov 2, 2020
Python: More import fixups
tausbn
committed
fb6a02e
View commit details
Copy full SHA for fb6a02e
View code at this point
Browse repository at this point
Commits on Oct 30, 2020
Python: Promote experimental queries
Show description for f903e4f
tausbn
committed
f903e4f
View commit details
Copy full SHA for f903e4f
View code at this point
Browse repository at this point
Commits on Oct 1, 2020
Fix OWASP broken links
smowton
committed
578ea1a
View commit details
Copy full SHA for 578ea1a
View code at this point
Browse repository at this point
Commits on Jul 7, 2020
Python: Autoformat everything using `qlformat`.
Show description for f07a7bf
tausbn
committed
f07a7bf
View commit details
Copy full SHA for f07a7bf
View code at this point
Browse repository at this point
Commits on Jun 19, 2020
Python: Get rid of deprecated terms in code and `.qhelp`.
tausbn
committed
01fb1e3
View commit details
Copy full SHA for 01fb1e3
View code at this point
Browse repository at this point
Commits on May 25, 2020
Python: Use proper import for semmle.python.dataflow.TaintTracking
Show description for f602f3e
RasmusWL
committed
f602f3e
View commit details
Copy full SHA for f602f3e
View code at this point
Browse repository at this point
Commits on Feb 20, 2020
Python: TarSlip sanitizer: handle not
RasmusWL
committed
1029f04
View commit details
Copy full SHA for 1029f04
View code at this point
Browse repository at this point
Python: TarSlip sanitizer: only clear taint on false edge
Show description for 3c317ed
RasmusWL
committed
3c317ed
View commit details
Copy full SHA for 3c317ed
View code at this point
Browse repository at this point
Commits on Feb 17, 2020
Python: Use StringValue instead of Value::forString
RasmusWL
committed
f3ab52b
View commit details
Copy full SHA for f3ab52b
View code at this point
Browse repository at this point
Commits on Feb 4, 2020
Python: Modernise Security/ queries
RasmusWL
committed
e5abfd0
View commit details
Copy full SHA for e5abfd0
View code at this point
Browse repository at this point
Commits on Feb 3, 2020
Python: Fix minor problems in security examples
RasmusWL
committed
27a7d09
View commit details
Copy full SHA for 27a7d09
View code at this point
Browse repository at this point
Commits on Jan 31, 2020
Python: Autoformat security
RasmusWL
committed
2648e34
View commit details
Copy full SHA for 2648e34
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.