Commits

Commit history

1. Commits on Oct 16, 2026

   • Add barrier models for sanitizers where possible

     Show description for 5c929a3
     

     owen-mc

     and

     Copilot

     committed
     5c929a3View commit details

     Copy full SHA for 5c929a3

     View code at this pointBrowse repository at this point
2. Commits on Oct 15, 2026

   • Add summary models for common sanitizers

     owen-mc

     committed
     4f593bfView commit details

     Copy full SHA for 4f593bf

     View code at this pointBrowse repository at this point
3. Commits on Sep 2, 2026

   • Merge pull request #21387 from github/nicolaswill/micronaut

     Show description for ed2b77e
     owen-mc

     authored
     ed2b77eView commit details

     Copy full SHA for ed2b77e

     View code at this pointBrowse repository at this point
4. Commits on Aug 20, 2026

   • Refine Micronaut data flow models

     nicolaswill

     committed
     16e9b22View commit details

     Copy full SHA for 16e9b22

     View code at this pointBrowse repository at this point
5. Commits on Aug 11, 2026

   • Java: replace non-existent String.valueOf(CharSequence) summary with a synthetic callable for valueOf(Object) on CharSequence arguments

     Show description for 925d3e2
     

     Copilot

     and

     hvitved

     authored
     925d3e2View commit details

     Copy full SHA for 925d3e2

     View code at this pointBrowse repository at this point
6. Commits on Aug 10, 2026

   • Java: test safe R2DBC parameter binding

     Show description for 6919c3d
     felickz

     committed
     6919c3dView commit details

     Copy full SHA for 6919c3d

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/io.r2dbc.spi.model.yml

     Show description for 2214e40
     

     felickz

     and

     owen-mc

     authored
     2214e40View commit details

     Copy full SHA for 2214e40

     View code at this pointBrowse repository at this point
7. Commits on Aug 4, 2026

   • Java: add R2DBC SPI SQL injection sinks

     Show description for 90b78c9
     felickz

     committed
     90b78c9View commit details

     Copy full SHA for 90b78c9

     View code at this pointBrowse repository at this point

   • Java: cover R2DBC fluent execution paths

     Show description for e079fdf
     felickz

     committed
     e079fdfView commit details

     Copy full SHA for e079fdf

     View code at this pointBrowse repository at this point

   • Java: model R2DBC SQL injection sinks

     Show description for 2e4a174
     felickz

     committed
     2e4a174View commit details

     Copy full SHA for 2e4a174

     View code at this pointBrowse repository at this point

   • Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr

     Show description for 9d164d0
     nicolaswill

     committed
     9d164d0View commit details

     Copy full SHA for 9d164d0

     View code at this pointBrowse repository at this point
8. Commits on Jul 29, 2026

   • Address Micronaut modeling review feedback

     nicolaswill

     committed
     6ac1a72View commit details

     Copy full SHA for 6ac1a72

     View code at this pointBrowse repository at this point
9. Commits on Jul 28, 2026

   • Update java/ql/lib/ext/io.micronaut.http.model.yml

     Show description for 4c821dd
     

     mbaluda

     and

     owen-mc

     authored
     4c821ddView commit details

     Copy full SHA for 4c821dd

     View code at this pointBrowse repository at this point
10. Commits on Jul 11, 2026

    • Fix path sanitizer

      owen-mc

      committed
      6057b4bView commit details

      Copy full SHA for 6057b4b

      View code at this pointBrowse repository at this point
11. Commits on Jul 9, 2026

    • Merge pull request #22130 from github/jacknojo/apache_poi_mads

      Show description for d5712ef
      jacknojo

      authored
      d5712efView commit details

      Copy full SHA for d5712ef

      View code at this pointBrowse repository at this point
12. Commits on Jul 8, 2026

    • Remove `main` entries

      jacknojo

      committed
      6c7b9f7View commit details

      Copy full SHA for 6c7b9f7

      View code at this pointBrowse repository at this point
13. Commits on Jul 7, 2026

    • Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink

      Show description for 8363d2d
      owen-mc

      authored
      8363d2dView commit details

      Copy full SHA for 8363d2d

      View code at this pointBrowse repository at this point

    • Apply suggestion from @owen-mc

      Show description for 6ff2a4c
      

      joshimar

      and

      owen-mc

      authored
      6ff2a4cView commit details

      Copy full SHA for 6ff2a4c

      View code at this pointBrowse repository at this point

    • Java: Model Spring reactive `WebClient.uri` as a request forgery sink

      joshimar

      committed
      1db3132View commit details

      Copy full SHA for 1db3132

      View code at this pointBrowse repository at this point
14. Commits on Jul 1, 2026

    • Fix misnamed MaD models files

      owen-mc

      committed
      7263c00View commit details

      Copy full SHA for 7263c00

      View code at this pointBrowse repository at this point

    • Add MaDs for Apache POI

      jacknojo

      committed
      4328031View commit details

      Copy full SHA for 4328031

      View code at this pointBrowse repository at this point
15. Commits on Jun 3, 2026

    • Merge pull request #21804 from github/copilot/add-tests-for-models

      Show description for 52f2a58
      owen-mc

      authored
      52f2a58View commit details

      Copy full SHA for 52f2a58

      View code at this pointBrowse repository at this point
16. Commits on May 28, 2026

    • Add summary models for `org.apache.http.client.methods.RequestBuilder`

      Show description for 8937e22
      owen-mc

      committed
      8937e22View commit details

      Copy full SHA for 8937e22

      View code at this pointBrowse repository at this point
17. Commits on May 19, 2026

    • Add MaDs for Apache Avro

      jacknojo

      committed
      3119ef6View commit details

      Copy full SHA for 3119ef6

      View code at this pointBrowse repository at this point
18. Commits on May 7, 2026

    • Fix yaml formatting

      owen-mc

      authored
      33035dbView commit details

      Copy full SHA for 33035db

      View code at this pointBrowse repository at this point
19. Commits on May 6, 2026

    • Replace fluent SSRF changes with Apache HttpClient execute model tests

      Show description for 043ec85
      

      Copilot

      and

      owen-mc

      authored
      043ec85View commit details

      Copy full SHA for 043ec85

      View code at this pointBrowse repository at this point
20. Commits on May 4, 2026

    • Update java/ql/lib/ext/org.apache.commons.io.model.yml

      Show description for 49e5886
      

      MarkLee131

      and

      owen-mc

      authored
      49e5886View commit details

      Copy full SHA for 49e5886

      View code at this pointBrowse repository at this point
21. Commits on May 3, 2026

    • Update java/ql/lib/ext/org.apache.commons.io.model.yml

      Show description for c10a05f
      

      MarkLee131

      and

      owen-mc

      authored
      c10a05fView commit details

      Copy full SHA for c10a05f

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/ext/javax.servlet.model.yml

      Show description for 8710e63
      

      MarkLee131

      and

      owen-mc

      authored
      8710e63View commit details

      Copy full SHA for 8710e63

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/ext/org.apache.commons.io.model.yml

      Show description for dbc9d0d
      

      MarkLee131

      and

      owen-mc

      authored
      dbc9d0dView commit details

      Copy full SHA for dbc9d0d

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/ext/java.nio.file.model.yml

      Show description for 9194cda
      

      MarkLee131

      and

      owen-mc

      authored
      9194cdaView commit details

      Copy full SHA for 9194cda

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/ext/java.nio.file.model.yml

      Show description for 7050241
      

      MarkLee131

      and

      owen-mc

      authored
      7050241View commit details

      Copy full SHA for 7050241

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/ext/java.nio.file.model.yml

      Show description for 62a0a3e
      

      MarkLee131

      and

      owen-mc

      authored
      62a0a3eView commit details

      Copy full SHA for 62a0a3e

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/ext/java.nio.file.model.yml

      Show description for 3ad2d8c
      

      MarkLee131

      and

      owen-mc

      authored
      3ad2d8cView commit details

      Copy full SHA for 3ad2d8c

      View code at this pointBrowse repository at this point
22. Commits on May 1, 2026

    • Java: move File inspection methods to path-injection[read]

      Show description for 119994b
      MarkLee131

      committed
      119994bView commit details

      Copy full SHA for 119994b

      View code at this pointBrowse repository at this point