Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
jtabsbm
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
experimental
semmle
python
frameworks
on
main
User selector
All users
All time
Commit history
Commits on Jun 8, 2026
1. Rename AgentSDK -> AgentSdk
Show description for 2cb0851
BazookaMusic
committed
2cb0851
View commit details
Copy full SHA for 2cb0851
View code at this point
Browse repository at this point
Commits on Jan 29, 2026
python: Add query for prompt injection
Show description for e7a0fc7
yoff
committed
e7a0fc7
View commit details
Copy full SHA for e7a0fc7
View code at this point
Browse repository at this point
Commits on Jul 23, 2024
Remove experimental query versions
joefarebrother
committed
a73d675
View commit details
Copy full SHA for a73d675
View code at this point
Browse repository at this point
Use a 3-valued newtype for hasSameSiteAttribute
joefarebrother
committed
226e4eb
View commit details
Copy full SHA for 226e4eb
View code at this point
Browse repository at this point
Change flag predicates to boolean parameters rather than boolean results
joefarebrother
committed
2df09f6
View commit details
Copy full SHA for 2df09f6
View code at this point
Browse repository at this point
Add cookie flags to cookie write concept, and alter experimental queries to use them
joefarebrother
committed
6f7b2a2
View commit details
Copy full SHA for 6f7b2a2
View code at this point
Browse repository at this point
Commits on Jun 18, 2024
fix conflict
am0o0
committed
8a7fdfa
View commit details
Copy full SHA for 8a7fdfa
View code at this point
Browse repository at this point
Commits on May 29, 2024
SecondaryCommandInjection to RemoteCommandExecution, change RemoteCommandExecution to module like SystemCommandExecution module
am0o0
committed
52a8091
View commit details
Copy full SHA for 52a8091
View code at this point
Browse repository at this point
Ssh2.qll: fix a typo
am0o0
committed
1714866
View commit details
Copy full SHA for 1714866
View code at this point
Browse repository at this point
Commits on May 10, 2024
fix actions reviews
am0o0
committed
0e80e86
View commit details
Copy full SHA for 0e80e86
View code at this point
Browse repository at this point
Commits on May 6, 2024
update Twisted document link
am0o0
authored and
tausbn
committed
6b9cc1a
View commit details
Copy full SHA for 6b9cc1a
View code at this point
Browse repository at this point
add twisted SSH client as secondary server command injection sinks, add proper test cases
am0o0
authored and
tausbn
committed
c4a38d0
View commit details
Copy full SHA for c4a38d0
View code at this point
Browse repository at this point
add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases
am0o0
authored and
tausbn
committed
0a765cc
View commit details
Copy full SHA for 0a765cc
View code at this point
Browse repository at this point
finalize Secondary server command injection queries and tests.
am0o0
authored and
tausbn
committed
7e93102
View commit details
Copy full SHA for 7e93102
View code at this point
Browse repository at this point
add ssh client libraries, add SecondaryServerCmdInjectionCustomizations
am0o0
authored and
tausbn
committed
ead2474
View commit details
Copy full SHA for ead2474
View code at this point
Browse repository at this point
Commits on Apr 24, 2024
Implemented sinks for bulk header updates, and added corresponding tests.
joefarebrother
committed
a88ad62
View commit details
Copy full SHA for a88ad62
View code at this point
Browse repository at this point
Add to header write concept a specification of whether the name or value arg allows newlines.
Show description for 68d9091
joefarebrother
committed
68d9091
View commit details
Copy full SHA for 68d9091
View code at this point
Browse repository at this point
Commits on Apr 22, 2024
Python: Autoformat everything
Show description for b484aee
tausbn
committed
b484aee
View commit details
Copy full SHA for b484aee
View code at this point
Browse repository at this point
Python: Change all remaining occurrences of `StrConst`
Show description for 1c68c98
tausbn
committed
1c68c98
View commit details
Copy full SHA for 1c68c98
View code at this point
Browse repository at this point
Commits on Jan 22, 2024
delete outdated deprecations
erik-krogh
committed
8be7ead
View commit details
Copy full SHA for 8be7ead
View code at this point
Browse repository at this point
Commits on Sep 7, 2023
Python: prepare to promote NoSqlInjection
Show description for 60dc1af
yoff
committed
60dc1af
View commit details
Copy full SHA for 60dc1af
View code at this point
Browse repository at this point
Commits on Oct 12, 2022
python: rewrite models using subscripts
Show description for db616a5
yoff
committed
db616a5
View commit details
Copy full SHA for db616a5
View code at this point
Browse repository at this point
Python: fix def nodes for subscript
Show description for 0b8e908
yoff
committed
0b8e908
View commit details
Copy full SHA for 0b8e908
View code at this point
Browse repository at this point
Commits on Sep 30, 2022
Merge pull request #10634 from yoff/python/rewrite-typetrackers
Show description for b66e5c5
codeql-ci
authored
b66e5c5
View commit details
Copy full SHA for b66e5c5
View code at this point
Browse repository at this point
Commits on Sep 29, 2022
python: rewrite type tracker for ldap operations
Show description for 84ab860
yoff
committed
84ab860
View commit details
Copy full SHA for 84ab860
View code at this point
Browse repository at this point
Commits on Sep 28, 2022
Python: inline `mongoCollectionMethod`
yoff
committed
63ee51a
View commit details
Copy full SHA for 63ee51a
View code at this point
Browse repository at this point
Commits on Sep 26, 2022
Python: type trackers to API graph
Show description for 441fc1b
yoff
committed
441fc1b
View commit details
Copy full SHA for 441fc1b
View code at this point
Browse repository at this point
Python: type tracking to API graph
Show description for 9b1ec03
yoff
committed
9b1ec03
View commit details
Copy full SHA for 9b1ec03
View code at this point
Browse repository at this point
Commits on Sep 9, 2022
ensure consistent casing of names
erik-krogh
committed
26d8553
View commit details
Copy full SHA for 26d8553
View code at this point
Browse repository at this point
Commits on Aug 25, 2022
rename more acronyms
erik-krogh
committed
cc7a9ef
View commit details
Copy full SHA for cc7a9ef
View code at this point
Browse repository at this point
Commits on Aug 22, 2022
run the implicit-this patch
erik-krogh
committed
28083eb
View commit details
Copy full SHA for 28083eb
View code at this point
Browse repository at this point
make some acronyms camelCase
erik-krogh
committed
e89e0eb
View commit details
Copy full SHA for e89e0eb
View code at this point
Browse repository at this point
Commits on Jun 21, 2022
Python: Rename getAUse -> getAValueReachableFromSource
asgerf
committed
b096f9e
View commit details
Copy full SHA for b096f9e
View code at this point
Browse repository at this point
Commits on Jun 14, 2022
Merge pull request #7127 from jty-team/jty/python/emailInjection
Show description for 6997618
yoff
authored
6997618
View commit details
Copy full SHA for 6997618
View code at this point
Browse repository at this point
Commits on Jun 3, 2022
Format `FlaskMail.qll` and `Sendgrid.qll`
jorgectf
committed
171239b
View commit details
Copy full SHA for 171239b
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.