Commits

Breadcrumbs

History for

oncodeql-cli-2.25.2

User selector

All users

All time

Commit History

Commits on Jul 15, 2025

• Update SnakeYaml reference to note that it is outdated

  owen-mc

  committed
  9ef22ff

  Copy full SHA for 9ef22ff

Commits on Jul 10, 2025

• Update qhelp: SnakeYaml is safe from version 2.0

  owen-mc

  committed
  c39e5a7

  Copy full SHA for c39e5a7

Commits on Jan 31, 2025

• Added missing "GOOD" and "BAD" to some examples

  fabienpe

  committed
  a9f107c

  Copy full SHA for a9f107c

Commits on Oct 26, 2023

• Java: Add JMS sink to java/unsafe-deserialization

  atorralba

  committed
  7af3d23

  Copy full SHA for 7af3d23

Commits on Oct 24, 2023

• Mass-rename MethodAccess -> MethodCall

  smowton

  authored
  f552a15

  Copy full SHA for f552a15

Commits on Mar 30, 2023

• Refactor CWE-502/UnsafeDeserialization

  egregius313

  committed
  e5f11d0

  Copy full SHA for e5f11d0

Commits on Jan 12, 2023

• Spelling

  smowton

  authored
  09d8a50

  Copy full SHA for 09d8a50

Commits on Jan 10, 2023

• suggestions in list format

  

  coadaflorin

  authored and

  JLLeitschuh

  committed
  4c1c12d

  Copy full SHA for 4c1c12d

• Apply suggestions from code review

  Show description for 1d7881e
  

  JLLeitschuh

  and

  smowton

  committed
  1d7881e

  Copy full SHA for 1d7881e

• Update UnsafeDeserialization.qhelp

  Show description for b7364f5
  

  atorralba

  authored and

  JLLeitschuh

  committed
  b7364f5

  Copy full SHA for b7364f5

• [Java] Document fixes for deserialization vulnerabilities by framework

  Show description for 3fa11c2
  JLLeitschuh

  committed
  3fa11c2

  Copy full SHA for 3fa11c2

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Oct 12, 2021

• Add change note and update qhelp

  smowton

  committed
  81c0e66

  Copy full SHA for 81c0e66

Commits on Sep 10, 2021

• Add support for the Flexjson framework to the unsafe-deserialization query

  smowton

  committed
  9b48820

  Copy full SHA for 9b48820

Commits on Aug 5, 2021

• Unsafe deserialization: add support for Jodd JSON library

  smowton

  committed
  0b6c991

  Copy full SHA for 0b6c991

Commits on Aug 4, 2021

• Add unsafe-deserialization support for Jabsorb

  Show description for 69549e9
  smowton

  committed
  69549e9

  Copy full SHA for 69549e9

Commits on Jul 16, 2021

• Refactored the query for unsafe deserialization

  artem-smotrakov

  committed
  6d7cb48

  Copy full SHA for 6d7cb48

Commits on Jul 12, 2021

• Removed fromSource() check in looksLikeResolveClassStep()

  artem-smotrakov

  committed
  09ae779

  Copy full SHA for 09ae779

Commits on Jul 9, 2021

• Added Jackson to UnsafeDeserialization.qhelp

  artem-smotrakov

  committed
  ea0991c

  Copy full SHA for ea0991c

• First draft of sinks for unsafe deserialization with Jackson

  artem-smotrakov

  committed
  3eb2af1

  Copy full SHA for 3eb2af1

Commits on Jun 18, 2021

• Merge pull request #6080 from github/calumgrant/security-severities

  Show description for 32f6a46
  calumgrant

  authored
  32f6a46

  Copy full SHA for 32f6a46

Commits on Jun 16, 2021

• Merge branch 'main' into java/UnsafeDeserialization

  haby0

  authored
  c1ada6d

  Copy full SHA for c1ada6d

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on May 31, 2021

• Fix typos

  haby0

  committed
  d678276

  Copy full SHA for d678276

Commits on May 17, 2021

• add change notes

  haby0

  committed
  58d774a

  Copy full SHA for 58d774a

Commits on May 14, 2021

• Modify ql

  haby0

  committed
  60fc607

  Copy full SHA for 60fc607

Commits on May 12, 2021

• Add UnsafeDeserialization

  haby0

  committed
  12f47bc

  Copy full SHA for 12f47bc

Commits on Apr 23, 2021

• Fix all dead qhelp links

  Show description for 455b840
  smowton

  committed
  455b840

  Copy full SHA for 455b840

Commits on Nov 11, 2019

• Merge pull request #2230 from yh-semmle/java-move-cwe502-lib

  Show description for b0fecbc
  aschackmull

  authored
  b0fecbc

  Copy full SHA for b0fecbc

Commits on Nov 7, 2019

• Update links to OWASP cheat sheet

  

  Sauyon Lee

  committed
  0040c9f

  Copy full SHA for 0040c9f

Commits on Oct 30, 2019

• Java: move `UnsafeDeserialization.qll` to standard library location

  yh-semmle

  committed
  8620b05

  Copy full SHA for 8620b05

Commits on May 6, 2019

• Java: Deprecate RemoteUserInput.

  aschackmull

  committed
  f367427

  Copy full SHA for f367427

Commits on Nov 16, 2018

• Java: Convert security queries to path-problems.

  aschackmull

  committed
  5e03b6f

  Copy full SHA for 5e03b6f

Commits on Oct 12, 2018

• Merge pull request #312 from aschackmull/java/autoformat-libs

  Show description for a8be7f2
  semmle-qlci

  authored
  a8be7f2

  Copy full SHA for a8be7f2