Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
445
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
src
on
codeql-cli/v2.25.6
User selector
All users
All time
Commit history
Commits on May 29, 2026
Release preparation for version 2.25.6
github-actions[bot]
committed
8b6f969
View commit details
Copy full SHA for 8b6f969
View code at this point
Browse repository at this point
Revert "Release preparation for version 2.25.6"
henrymercer
authored
9bc0c1b
View commit details
Copy full SHA for 9bc0c1b
View code at this point
Browse repository at this point
Commits on May 25, 2026
Release preparation for version 2.25.6
github-actions[bot]
committed
44a914e
View commit details
Copy full SHA for 44a914e
View code at this point
Browse repository at this point
Commits on May 18, 2026
Post-release preparation for codeql-cli-2.25.5
github-actions[bot]
committed
9f64000
View commit details
Copy full SHA for 9f64000
View code at this point
Browse repository at this point
Release preparation for version 2.25.5
github-actions[bot]
committed
e38616a
View commit details
Copy full SHA for e38616a
View code at this point
Browse repository at this point
Commits on May 12, 2026
Merge pull request #21807 from owen-mc/java/improve-qhelp-unsafe-deserialization
Show description for 0b808e1
owen-mc
authored
0b808e1
View commit details
Copy full SHA for 0b808e1
View code at this point
Browse repository at this point
Commits on May 8, 2026
Note that common standard library types can be vulnerable to gadget-chain attacks
owen-mc
committed
a5ef036
View commit details
Copy full SHA for a5ef036
View code at this point
Browse repository at this point
Commits on May 7, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
26af528
View commit details
Copy full SHA for 26af528
View code at this point
Browse repository at this point
Do not make such a strong security claim
Show description for f2ea3b9
owen-mc
and
Copilot
authored
f2ea3b9
View commit details
Copy full SHA for f2ea3b9
View code at this point
Browse repository at this point
Clarify that deserialization that follows a schema is safe
owen-mc
committed
427b73e
View commit details
Copy full SHA for 427b73e
View code at this point
Browse repository at this point
Remove double spaces from qhelp
owen-mc
committed
7aa3fd8
View commit details
Copy full SHA for 7aa3fd8
View code at this point
Browse repository at this point
Commits on May 5, 2026
Post-release preparation for codeql-cli-2.25.4
github-actions[bot]
committed
7610277
View commit details
Copy full SHA for 7610277
View code at this point
Browse repository at this point
Release preparation for version 2.25.4
github-actions[bot]
committed
88e1d86
View commit details
Copy full SHA for 88e1d86
View code at this point
Browse repository at this point
Commits on May 4, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
4673941
View commit details
Copy full SHA for 4673941
View code at this point
Browse repository at this point
Java: Fix reference in deprecated code.
aschackmull
committed
c7904b1
View commit details
Copy full SHA for c7904b1
View code at this point
Browse repository at this point
Java: Delete old deprecated code.
aschackmull
committed
17fded4
View commit details
Copy full SHA for 17fded4
View code at this point
Browse repository at this point
Commits on Apr 21, 2026
Merge branch 'github:main' into fix/path-injection-read-subkind
MarkLee131
authored
07e97e2
View commit details
Copy full SHA for 07e97e2
View code at this point
Browse repository at this point
Commits on Apr 20, 2026
Java: split read-only path sinks into path-injection[read]
Show description for c336a15
MarkLee131
committed
c336a15
View commit details
Copy full SHA for c336a15
View code at this point
Browse repository at this point
Post-release preparation for codeql-cli-2.25.3
github-actions[bot]
committed
a0bab53
View commit details
Copy full SHA for a0bab53
View code at this point
Browse repository at this point
Release preparation for version 2.25.3
github-actions[bot]
committed
c861d99
View commit details
Copy full SHA for c861d99
View code at this point
Browse repository at this point
Commits on Apr 6, 2026
Post-release preparation for codeql-cli-2.25.2
github-actions[bot]
committed
242090e
View commit details
Copy full SHA for 242090e
View code at this point
Browse repository at this point
Release preparation for version 2.25.2
github-actions[bot]
committed
4fe2f6d
View commit details
Copy full SHA for 4fe2f6d
View code at this point
Browse repository at this point
Commits on Mar 30, 2026
Merge branch 'main' of https://github.com/github/codeql into post-release-prep/codeql-cli-2.25.1
oscarsj
committed
59eec7f
View commit details
Copy full SHA for 59eec7f
View code at this point
Browse repository at this point
Post-release preparation for codeql-cli-2.25.1
github-actions[bot]
committed
ce6e6d5
View commit details
Copy full SHA for ce6e6d5
View code at this point
Browse repository at this point
Commits on Mar 25, 2026
Release preparation for version 2.25.1
github-actions[bot]
committed
fb01184
View commit details
Copy full SHA for fb01184
View code at this point
Browse repository at this point
Release preparation for version 2.25.1
github-actions[bot]
committed
8cf0954
View commit details
Copy full SHA for 8cf0954
View code at this point
Browse repository at this point
Commits on Mar 19, 2026
Merge branch 'main' into post-release-prep/codeql-cli-2.25.0
oscarsj
authored
2139b97
View commit details
Copy full SHA for 2139b97
View code at this point
Browse repository at this point
Commits on Mar 16, 2026
Post-release preparation for codeql-cli-2.25.0
github-actions[bot]
committed
e3dbf5b
View commit details
Copy full SHA for e3dbf5b
View code at this point
Browse repository at this point
Release preparation for version 2.25.0
github-actions[bot]
committed
d605575
View commit details
Copy full SHA for d605575
View code at this point
Browse repository at this point
Commits on Mar 13, 2026
Add change notes
owen-mc
committed
5280913
View commit details
Copy full SHA for 5280913
View code at this point
Browse repository at this point
Change @security-severity for log injection queries from 7.8 to 6.1
owen-mc
committed
056aa34
View commit details
Copy full SHA for 056aa34
View code at this point
Browse repository at this point
Change @security-severity for XSS queries from 6.1 to 7.8
owen-mc
committed
f58a6e5
View commit details
Copy full SHA for f58a6e5
View code at this point
Browse repository at this point
Commits on Mar 6, 2026
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.21
oscarsj
committed
3b9eba2
View commit details
Copy full SHA for 3b9eba2
View code at this point
Browse repository at this point
Commits on Mar 5, 2026
Merge pull request #21412 from aschackmull/java/binary-assignment
Show description for 8ef4be4
aschackmull
authored
8ef4be4
View commit details
Copy full SHA for 8ef4be4
View code at this point
Browse repository at this point
Java: Make Assignment extend BinaryExpr.
aschackmull
committed
ec1d034
View commit details
Copy full SHA for ec1d034
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
github-actions[bot]
