Repository navigation

All pull requests

Swift: Do not terminate the extractor when a file cannot be opened
#22851jketema opened Oct 20, 2026Contributor
Java: java/sensitive-log should follow flow through character-filtering callables
#22850owen-mc opened Oct 20, 2026Contributor
Go: Fix extractor not restoring git http.sslCAInfo setting if is configured on the host
#22849mbg opened Oct 20, 2026Member
6
Rust: Prefer richer feature configurations when extracting dependencies
#22847paldepind opened Oct 20, 2026Contributor
yeast: Add nicer location syntax
#22842tausbn opened Oct 19, 2026Contributor
3
JavaScript: migrate the TypeScript parser to native 7.1
#22841paldepind opened Oct 19, 2026Contributor
6
Go: stabilize build constraint evaluation
#22839owen-mc opened Oct 16, 2026Contributor
2
Java: Allow models-as-data barriers for log injection and improve log injection and path injection sanitizers
#22835owen-mc opened Oct 15, 2026Contributor
8
Java: Recognize constant string comparisons as taint sanitizers
#22826owen-mc opened Oct 15, 2026Contributor
5
Go: Handle quoted dots in hostname regexps
#22824theinfosecguy opened Oct 14, 2026Contributor
5
Actions: Do not treat job.workflow_* as untrusted input
#22823cplieger opened Oct 14, 2026
Java: detect command injection through delegating launchers
#22818owen-mc with CopilotAI opened Oct 14, 2026
20
Python: model PyMongo collection reads as database sources
#22812kazuki-netizen opened Oct 13, 2026
C++: Create quality suite
#22811geoffw0 opened Oct 12, 2026Contributor
Unified: Add flow summary support
#22809asgerf opened Oct 12, 2026Contributor
6
JS: Improve support for NodeJS pipe callbacks
#22808MathiasVP opened Oct 12, 2026Contributor
2
CFG: Handle parameter cfg explicitly.
#22807aschackmull opened Oct 12, 2026Contributor
C++: reduce scanf false positives after fallback initialization
#22804SkyCipherr opened Oct 11, 2026
Actions: Resolve $/ self repository references to local callables
#22802WilliamBerryiii opened Oct 9, 2026
1
Go: Add models for go 1.21
#22797owen-mc opened Oct 9, 2026Contributor
6
Unified: Improve type inference for constructor calls
#22796hvitved opened Oct 9, 2026Contributor
17
Bump the npm_and_yarn group across 7 directories with 4 updates
#22780dependabot[bot] opened Oct 8, 2026Bot
JS: Improve support for NodeJS pipe callbacks
#22765MathiasVP opened Oct 6, 2026Contributor
22
Bump pymongo from 4.6.3 to 4.18.2 in /python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC in the pip group across 1 directory
#22758dependabot[bot] opened Oct 6, 2026Bot
C#: Data flow for property patterns.
#22757michaelnebel opened Oct 6, 2026Contributor
2

Navigation Menu

Repository navigation

All pull requests

Swift: Do not terminate the extractor when a file cannot be opened

Java: java/sensitive-log should follow flow through character-filtering callables

Go: Fix extractor not restoring git `http.sslCAInfo` setting if is configured on the host

Rust: Prefer richer feature configurations when extracting dependencies

yeast: Add nicer location syntax

JavaScript: migrate the TypeScript parser to native 7.1

Go: stabilize build constraint evaluation

Java: Allow models-as-data barriers for log injection and improve log injection and path injection sanitizers

Java: Recognize constant string comparisons as taint sanitizers

Go: Handle quoted dots in hostname regexps

Actions: Do not treat `job.workflow_*` as untrusted input

Java: detect command injection through delegating launchers

Python: model PyMongo collection reads as database sources

C++: Create quality suite

Unified: Add flow summary support

JS: Improve support for NodeJS `pipe` callbacks

CFG: Handle parameter cfg explicitly.

C++: reduce scanf false positives after fallback initialization

Actions: Resolve `$/` self repository references to local callables

Go: Add models for go 1.21

Unified: Improve type inference for constructor calls

Bump the npm_and_yarn group across 7 directories with 4 updates

JS: Improve support for NodeJS `pipe` callbacks

Bump pymongo from 4.6.3 to 4.18.2 in /python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC in the pip group across 1 directory

C#: Data flow for property patterns.

Pull requests