Commits

Commit history

1. Commits on Nov 4, 2026

   • C++: Drive-by fix: Select the underlying value instead of the reference in CWE-311 queries.

     MathiasVP

     committed
     03a8c20View commit details

     Copy full SHA for 03a8c20

     View code at this pointBrowse repository at this point

   • C++: Alow char-like types in CWE-311 queries.

     MathiasVP

     committed
     1bcea30View commit details

     Copy full SHA for 1bcea30

     View code at this pointBrowse repository at this point
2. Commits on Oct 29, 2026

   • Exclude std::byte buffers from suspicious pointer scaling

     Show description for ebae47d
     

     jketema

     and

     Copilot

     committed
     ebae47dView commit details

     Copy full SHA for ebae47d

     View code at this pointBrowse repository at this point
3. Commits on Oct 23, 2026

   • Replace dead link in many qhelp files.

     geoffw0

     committed
     e0654e0View commit details

     Copy full SHA for e0654e0

     View code at this pointBrowse repository at this point
4. Commits on Oct 5, 2026

   • Move HttpStringLiteral class documentation

     mbaluda

     committed
     1c10fcaView commit details

     Copy full SHA for 1c10fca

     View code at this pointBrowse repository at this point
5. Commits on Oct 3, 2026

   • Refactor HttpStringLiteral

     Show description for 856f217
     mbaluda

     authored
     856f217View commit details

     Copy full SHA for 856f217

     View code at this pointBrowse repository at this point
6. Commits on Aug 25, 2026

   • Merge branch 'main' into codex/issue-5163-wikimedia-links

     jketema

     authored
     b160f27View commit details

     Copy full SHA for b160f27

     View code at this pointBrowse repository at this point
7. Commits on Aug 22, 2026

   • Use HTTPS for Wikimedia query-help links

     miachillgood

     committed
     c8afb1dView commit details

     Copy full SHA for c8afb1d

     View code at this pointBrowse repository at this point
8. Commits on Aug 19, 2026

   • C++: Fixup 'cpp/sql-injection' so that it doesn't require the sink to be an (indirect)expr.

     MathiasVP

     committed
     fe46062View commit details

     Copy full SHA for fe46062

     View code at this pointBrowse repository at this point
9. Commits on Jul 9, 2026

   • C++: Add CWE 73 and CWE 78 tags to `cpp/uncontrolled-process-operation`

     Show description for 72efb6a
     jketema

     committed
     72efb6aView commit details

     Copy full SHA for 72efb6a

     View code at this pointBrowse repository at this point
10. Commits on May 18, 2026

    • C++: Add a 'call' column to 'hasRemoteFlowSource' and 'hasLocalFlowSource' to support modeling of 'scanf_s'.

      MathiasVP

      committed
      16235d7View commit details

      Copy full SHA for 16235d7

      View code at this pointBrowse repository at this point
11. Commits on Apr 14, 2026

    • Merge branch 'main' into suspicioussizeof2

      geoffw0

      authored
      fe7e848View commit details

      Copy full SHA for fe7e848

      View code at this pointBrowse repository at this point
12. Commits on Apr 2, 2026

    • C++: Upgrade query precision.

      geoffw0

      committed
      70b72f7View commit details

      Copy full SHA for 70b72f7

      View code at this pointBrowse repository at this point

    • C++: Upgrade query precision.

      geoffw0

      committed
      520e95dView commit details

      Copy full SHA for 520e95d

      View code at this pointBrowse repository at this point
13. Commits on Mar 20, 2026

    • Merge pull request #21514 from geoffw0/suspicioussizeof

      Show description for 208ae7a
      geoffw0

      authored
      208ae7aView commit details

      Copy full SHA for 208ae7a

      View code at this pointBrowse repository at this point
14. Commits on Mar 19, 2026

    • C++: Fix the issue.

      geoffw0

      committed
      0f794b5View commit details

      Copy full SHA for 0f794b5

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into fix/format-string-fp-in-printf-impl

      MarkLee131

      authored
      1ddf81cView commit details

      Copy full SHA for 1ddf81c

      View code at this pointBrowse repository at this point

    • the [] syntax directly

      Show description for c155394
      

      MarkLee131

      and

      geoffw0

      authored
      c155394View commit details

      Copy full SHA for c155394

      View code at this pointBrowse repository at this point

    • use American spellings in documentation

      Show description for 2c76e6e
      

      MarkLee131

      and

      Copilot

      authored
      2c76e6eView commit details

      Copy full SHA for 2c76e6e

      View code at this pointBrowse repository at this point
15. Commits on Mar 17, 2026

    • C++: exclude printf implementation internals from format string sinks

      MarkLee131

      committed
      ff48ac5View commit details

      Copy full SHA for ff48ac5

      View code at this pointBrowse repository at this point
16. Commits on Mar 13, 2026

    • Change @security-severity for XSS queries from 6.1 to 7.8

      owen-mc

      committed
      f58a6e5View commit details

      Copy full SHA for f58a6e5

      View code at this pointBrowse repository at this point
17. Commits on Jan 23, 2026

    • Merge branch 'main' into cpp/mad-barriers

      jketema

      authored
      ad590f3View commit details

      Copy full SHA for ad590f3

      View code at this pointBrowse repository at this point

    • C++: Simplify `cpp/sql-injection` barrier

      Show description for ccd07b8
      jketema

      committed
      ccd07b8View commit details

      Copy full SHA for ccd07b8

      View code at this pointBrowse repository at this point
18. Commits on Jan 21, 2026

    • Allow MaD barriers

      Show description for 656ebab
      owen-mc

      committed
      656ebabView commit details

      Copy full SHA for 656ebab

      View code at this pointBrowse repository at this point
19. Commits on Jan 15, 2026

    • C++: Add indirect barrier guard to 'cpp/unbounded-write' to prevent FPs after fixing conflation.

      MathiasVP

      committed
      6da7890View commit details

      Copy full SHA for 6da7890

      View code at this pointBrowse repository at this point
20. Commits on Dec 3, 2025

    • Use more flowTo.

      aschackmull

      committed
      78e1879View commit details

      Copy full SHA for 78e1879

      View code at this pointBrowse repository at this point

    • Use flowFrom.

      aschackmull

      committed
      dc6d3feView commit details

      Copy full SHA for dc6d3fe

      View code at this pointBrowse repository at this point
21. Commits on Oct 28, 2025

    • Constrain location overrides to actual sources/sinks

      d10c

      committed
      a0975e7View commit details

      Copy full SHA for a0975e7

      View code at this pointBrowse repository at this point

    • C++/SqlTainted

      d10c

      committed
      96e1536View commit details

      Copy full SHA for 96e1536

      View code at this pointBrowse repository at this point

    • C++/UseOfHttp

      d10c

      committed
      ec63547View commit details

      Copy full SHA for ec63547

      View code at this pointBrowse repository at this point

    • C++/TaintedAllocationSize

      d10c

      committed
      a65d4d5View commit details

      Copy full SHA for a65d4d5

      View code at this pointBrowse repository at this point

    • C++/ArithmeticUncontrolled

      d10c

      committed
      f3d51e0View commit details

      Copy full SHA for f3d51e0

      View code at this pointBrowse repository at this point

    • C++/CleartextTransmission

      d10c

      committed
      bbe2bf2View commit details

      Copy full SHA for bbe2bf2

      View code at this pointBrowse repository at this point

    • C++/CleartextFileWrite

      d10c

      committed
      b018040View commit details

      Copy full SHA for b018040

      View code at this pointBrowse repository at this point

    • C++/CleartextBufferWrite

      d10c

      committed
      d89aa0fView commit details

      Copy full SHA for d89aa0f

      View code at this pointBrowse repository at this point