All pull requests

Pull requests

• Add GitHub Actions workflow for .NET project

  external-contribution
  #22840·sn109946 opened Oct 18, 2026·

  ·

• Go: stabilize build constraint evaluation

  Gono-change-note-required
  #22839·owen-mc opened Oct 16, 2026Contributor·

  ·
  2

• Java: Allow models-as-data barriers for log injection and improve log injection and path injection sanitizers

  documentationJava
  #22835·owen-mc opened Oct 15, 2026Contributor·

  ·
  8

• unified: Avoid overflow in taint reach per million nodes

  no-change-note-requiredUnified
  #22833·asgerf opened Oct 15, 2026Contributor·

  ·
  1

• JS: Do not flag computed __proto__ properties

  documentationexternal-contributionJS
  #22829·eugeniodepalo opened Oct 15, 2026·

  ·
  1

• Java: Recognize constant string comparisons as taint sanitizers

  documentationJava
  #22826·owen-mc opened Oct 15, 2026Contributor·

  ·
  5

• Go: Handle quoted dots in hostname regexps

  documentationexternal-contributionGo
  #22824·theinfosecguy opened Oct 14, 2026Contributor·

  ·
  1

  5

• Actions: Do not treat job.workflow_* as untrusted input

  Actionsdocumentationexternal-contribution
  #22823·cplieger opened Oct 14, 2026·

  ·

• Java: detect command injection through delegating launchers

  documentationJava
  #22818·owen-mc with CopilotAI opened Oct 14, 2026·

  ·
  20

  

• Unified: Preserve generic arguments on qualified Swift types

  no-change-note-requiredUnified
  #22817·paldepind opened Oct 14, 2026Contributor·

  ·
  1

• Python: model PyMongo collection reads as database sources

  documentationexternal-contributionPython
  #22812·kazuki-netizen opened Oct 13, 2026·

  ·

• C++: Create quality suite

  C++documentation
  #22811·geoffw0 opened Oct 12, 2026Contributor·

  ·

• Unified: flow summaries

  DataFlow LibraryUnified
  #22809·asgerf opened Oct 12, 2026Contributor·

  ·

• JS: Improve support for NodeJS pipe callbacks

  documentationJS
  #22808·MathiasVP opened Oct 12, 2026Contributor·

  ·
  2

• CFG: Handle parameter cfg explicitly.

  #22807·aschackmull opened Oct 12, 2026Contributor·

  ·

• C++: reduce scanf false positives after fallback initialization

  C++documentationexternal-contribution
  #22804·SkyCipherr opened Oct 11, 2026·

  ·

• Actions: Resolve $/ self repository references to local callables

  Actionsdocumentationexternal-contribution
  #22802·WilliamBerryiii opened Oct 9, 2026·

  ·
  1

  1

• MaD: update generator scripts to support writing JSON data extensions

  #22798·nickrolfe opened Oct 9, 2026Contributor·

  ·
  7

• Go: Add models for go 1.21

  documentationGo
  #22797·owen-mc opened Oct 9, 2026Contributor·

  ·
  6

• Unified: Improve type inference for constructor calls

  Unified
  #22796·hvitved opened Oct 9, 2026Contributor·

  ·

• yeast: Add AST for rewrite rules

  documentationno-change-note-required
  #22786·tausbn opened Oct 8, 2026Contributor·

  ·
  10

• Bump the npm_and_yarn group across 7 directories with 4 updates

  dependenciesjavascriptJS
  #22780·dependabot[bot] opened Oct 8, 2026Bot·

  ·

• JS: Improve support for NodeJS pipe callbacks

  documentationJS
  #22765·MathiasVP opened Oct 6, 2026Contributor·

  ·
  22

• Bump pymongo from 4.6.3 to 4.18.2 in /python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC in the pip group across 1 directory

  dependenciesPython
  #22758·dependabot[bot] opened Oct 6, 2026Bot·

  ·

• C#: Data flow for property patterns.

  C#documentation
  #22757·michaelnebel opened Oct 6, 2026Contributor·

  ·
  2