Commits

Commit history

1. Commits on Oct 21, 2026

   • Remove prohibited CWE-730 tag from queries

     Show description for bd80295
     

     jketema

     and

     Copilot

     committed
     bd80295View commit details

     Copy full SHA for bd80295

     View code at this pointBrowse repository at this point
2. Commits on Jun 6, 2026

   • Add experimental JS query for SSRF guards missing IPv6-transition unwrap

     Show description for e93bc11
     tonghuaroot

     committed
     e93bc11View commit details

     Copy full SHA for e93bc11

     View code at this pointBrowse repository at this point
3. Commits on Dec 3, 2025

   • Use flowFrom.

     aschackmull

     committed
     dc6d3feView commit details

     Copy full SHA for dc6d3fe

     View code at this pointBrowse repository at this point
4. Commits on Oct 28, 2025

   • JS/SSRF

     Show description for bb80d83
     d10c

     committed
     bb80d83View commit details

     Copy full SHA for bb80d83

     View code at this pointBrowse repository at this point
5. Commits on Sep 8, 2025

   • Merge pull request #20146 from Napalys/js/move-cors-query-from-experimental

     Show description for 8c34b7e
     Napalys

     authored
     8c34b7eView commit details

     Copy full SHA for 8c34b7e

     View code at this pointBrowse repository at this point
6. Commits on Sep 5, 2025

   • Remove non-breaking spaces from code

     aibaars

     committed
     5d3ec35View commit details

     Copy full SHA for 5d3ec35

     View code at this pointBrowse repository at this point
7. Commits on Jul 30, 2025

   • Move CORS misconfiguration query from experimental to Security

     Napalys

     committed
     358617fView commit details

     Copy full SHA for 358617f

     View code at this pointBrowse repository at this point
8. Commits on Jun 30, 2025

   • Merge pull request #19762 from trailofbits/VF/type-orm-model-improvements

     Show description for 3247bab
     asgerf

     authored
     3247babView commit details

     Copy full SHA for 3247bab

     View code at this pointBrowse repository at this point
9. Commits on Jun 26, 2025

   • Update formatting

     Vasco-jofra

     committed
     8a75165View commit details

     Copy full SHA for 8a75165

     View code at this pointBrowse repository at this point
10. Commits on Jun 25, 2025

    • Merge pull request #19858 from Napalys/js/execa

      Show description for 3d9e2f5
      Napalys

      authored
      3d9e2f5View commit details

      Copy full SHA for 3d9e2f5

      View code at this pointBrowse repository at this point
11. Commits on Jun 24, 2025

    • JS: moved `execa` out of experimental

      Napalys

      committed
      d8b5cb5View commit details

      Copy full SHA for d8b5cb5

      View code at this pointBrowse repository at this point
12. Commits on Jun 23, 2025

    • JS: Remove js/actions/pull-request-target

      Show description for 3a00e8d
      asgerf

      committed
      3a00e8dView commit details

      Copy full SHA for 3a00e8d

      View code at this pointBrowse repository at this point
13. Commits on Jun 13, 2025

    • Model the TypeORM Repository API

      Vasco-jofra

      committed
      4ea5377View commit details

      Copy full SHA for 4ea5377

      View code at this pointBrowse repository at this point
14. Commits on Apr 30, 2025

    • Fix cwe tags to include leading zero

      owen-mc

      committed
      cf614a5View commit details

      Copy full SHA for cf614a5

      View code at this pointBrowse repository at this point
15. Commits on Mar 14, 2025

    • JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()

      Show description for ab74898
      asgerf

      committed
      ab74898View commit details

      Copy full SHA for ab74898

      View code at this pointBrowse repository at this point
16. Commits on Feb 11, 2025

    • JS: Provide more precise related locations

      asgerf

      committed
      7e3f898View commit details

      Copy full SHA for 7e3f898

      View code at this pointBrowse repository at this point
17. Commits on Jan 23, 2025

    • JS: Ignore experimental queries for now

      asgerf

      committed
      102b187View commit details

      Copy full SHA for 102b187

      View code at this pointBrowse repository at this point

    • JS: Rerun patch query after bugfix

      asgerf

      committed
      dba76a0View commit details

      Copy full SHA for dba76a0

      View code at this pointBrowse repository at this point
18. Commits on Jan 20, 2025

    • JS: Auto-patch diff informed queries

      asgerf

      committed
      fd763a0View commit details

      Copy full SHA for fd763a0

      View code at this pointBrowse repository at this point
19. Commits on Dec 16, 2024

    • JS: Mass rename to node1,state1,node2,state2 naming convention

      asgerf

      committed
      079294eView commit details

      Copy full SHA for 079294e

      View code at this pointBrowse repository at this point

    • JS: Migrate CorsPermissiveConfiguration

      asgerf

      committed
      ebe596fView commit details

      Copy full SHA for ebe596f

      View code at this pointBrowse repository at this point

    • JS: Migrate an experimental CodeInjection query

      asgerf

      committed
      d83ddfaView commit details

      Copy full SHA for d83ddfa

      View code at this pointBrowse repository at this point

    • JS: Rename an experimental query

      Show description for a398599
      asgerf

      committed
      a398599View commit details

      Copy full SHA for a398599

      View code at this pointBrowse repository at this point
20. Commits on Dec 3, 2024

    • JS: Remove use of SanitizerGuardNode in experimental SSRF query

      Show description for b346198
      asgerf

      committed
      b346198View commit details

      Copy full SHA for b346198

      View code at this pointBrowse repository at this point

    • JS: Remove use of MakeLegacyBarrierGuard in experimental SSRF

      asgerf

      committed
      a574ff1View commit details

      Copy full SHA for a574ff1

      View code at this pointBrowse repository at this point

    • Remove unsupported features from PoI

      asgerf

      committed
      75ab485View commit details

      Copy full SHA for 75ab485

      View code at this pointBrowse repository at this point

    • JS: Port experimental DecompressionBombs to ConfigSig

      asgerf

      committed
      834d35bView commit details

      Copy full SHA for 834d35b

      View code at this pointBrowse repository at this point

    • JS: Port experimental CorsPermissiveConfiguration to ConfigSig

      Show description for 871bc3b
      asgerf

      committed
      871bc3bView commit details

      Copy full SHA for 871bc3b

      View code at this pointBrowse repository at this point

    • JS: Port experimental decodeJwtWithoutVerificationLocalSource

      asgerf

      committed
      f5a6485View commit details

      Copy full SHA for f5a6485

      View code at this pointBrowse repository at this point

    • JS: Port experimental jwtDecodeWithoutVerification to ConfigSig

      asgerf

      committed
      72e5226View commit details

      Copy full SHA for 72e5226

      View code at this pointBrowse repository at this point

    • JS: Port experimental EnvValueInjection to ConfigSig

      asgerf

      committed
      7e162f5View commit details

      Copy full SHA for 7e162f5

      View code at this pointBrowse repository at this point

    • JS: Port experimental EnvValueAndKeyInjection to ConfigSig

      asgerf

      committed
      4f83907View commit details

      Copy full SHA for 4f83907

      View code at this pointBrowse repository at this point

    • JS: Port an experimental CodeInjection variant to ConfigSig

      asgerf

      committed
      8887ca1View commit details

      Copy full SHA for 8887ca1

      View code at this pointBrowse repository at this point
21. Commits on Nov 20, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      asgerf

      committed
      d52bc97View commit details

      Copy full SHA for d52bc97

      View code at this pointBrowse repository at this point
22. Commits on Nov 1, 2024

    • JS: Convert remaining queries to use ActiveThreatModelSourceAsSource

      RasmusWL

      committed
      dc8e645View commit details

      Copy full SHA for dc8e645

      View code at this pointBrowse repository at this point