Commits

Commit history

1. Commits on Oct 14, 2026

   • Make queries use ActiveThreatModelSource, not RemoteFlowSource

     Show description for 9b363ee
     owen-mc

     committed
     9b363eeView commit details

     Copy full SHA for 9b363ee

     View code at this pointBrowse repository at this point

   • Use instanceof for threat model sources

     Show description for 55705d4
     

     owen-mc

     and

     Copilot

     committed
     55705d4View commit details

     Copy full SHA for 55705d4

     View code at this pointBrowse repository at this point
2. Commits on Jun 8, 2026

   • 1. Rename AgentSDK -> AgentSdk

     Show description for 2cb0851
     BazookaMusic

     committed
     2cb0851View commit details

     Copy full SHA for 2cb0851

     View code at this pointBrowse repository at this point
3. Commits on Jan 29, 2026

   • python: Add query for prompt injection

     Show description for e7a0fc7
     yoff

     committed
     e7a0fc7View commit details

     Copy full SHA for e7a0fc7

     View code at this pointBrowse repository at this point
4. Commits on Jan 7, 2026

   • Python: Use correct first parameter name for zstd call

     Show description for 8602a2d
     

     tausbn

     and

     yoff

     authored
     8602a2dView commit details

     Copy full SHA for 8602a2d

     View code at this pointBrowse repository at this point
5. Commits on Dec 9, 2025

   • Python: Add modelling for `zstd.compression`

     Show description for ad68a5e
     tausbn

     committed
     ad68a5eView commit details

     Copy full SHA for ad68a5e

     View code at this pointBrowse repository at this point
6. Commits on Nov 26, 2025

   • Remove trailing periods from @name metadata in query files

     Show description for caf6b95
     felicitymay

     committed
     caf6b95View commit details

     Copy full SHA for caf6b95

     View code at this pointBrowse repository at this point
7. Commits on Oct 28, 2025

   • Python/LdapInsecureAuth

     Show description for 1ff24cb
     d10c

     committed
     1ff24cbView commit details

     Copy full SHA for 1ff24cb

     View code at this pointBrowse repository at this point

   • Python/CorsBypass

     d10c

     committed
     998de14View commit details

     Copy full SHA for 998de14

     View code at this pointBrowse repository at this point

   • Python/UnsafeUsageOfClientSideEncryptionVersion

     d10c

     committed
     4bc9edeView commit details

     Copy full SHA for 4bc9ede

     View code at this pointBrowse repository at this point

   • Python/UnsafeUnpackQuery

     Show description for 6d57316
     d10c

     committed
     6d57316View commit details

     Copy full SHA for 6d57316

     View code at this pointBrowse repository at this point
8. Commits on Sep 1, 2025

   • Python: Fix some Ql4Ql violations.

     michaelnebel

     committed
     dbd3125View commit details

     Copy full SHA for dbd3125

     View code at this pointBrowse repository at this point
9. Commits on Jul 17, 2025

   • [DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash

     d10c

     committed
     20030d5View commit details

     Copy full SHA for 20030d5

     View code at this pointBrowse repository at this point
10. Commits on Jun 17, 2025

    • Python: mass enable diff-informed data flow `none()` location overrides

      Show description for b79ce6d
      d10c

      committed
      b79ce6dView commit details

      Copy full SHA for b79ce6d

      View code at this pointBrowse repository at this point
11. Commits on Apr 30, 2025

    • Fix cwe tags to include leading zero

      owen-mc

      committed
      cf614a5View commit details

      Copy full SHA for cf614a5

      View code at this pointBrowse repository at this point
12. Commits on Feb 6, 2025

    • Python: resolve remaining TODOs

      asgerf

      committed
      d3ee658View commit details

      Copy full SHA for d3ee658

      View code at this pointBrowse repository at this point

    • Python: ignore experimental for now

      asgerf

      committed
      15c2ccbView commit details

      Copy full SHA for 15c2ccb

      View code at this pointBrowse repository at this point

    • Python: mass enable diff-informed data flow

      asgerf

      committed
      e4a1847View commit details

      Copy full SHA for e4a1847

      View code at this pointBrowse repository at this point
13. Commits on Dec 9, 2024

    • Remove experimental version + qhelp fixes

      joefarebrother

      committed
      4602c5cView commit details

      Copy full SHA for 4602c5c

      View code at this pointBrowse repository at this point

    • Promote jinja sinks

      joefarebrother

      committed
      60d8a85View commit details

      Copy full SHA for 60d8a85

      View code at this pointBrowse repository at this point

    • Copy template injection to standard pack + add jinja sinks

      joefarebrother

      committed
      8647073View commit details

      Copy full SHA for 8647073

      View code at this pointBrowse repository at this point
14. Commits on Oct 8, 2024

    • Python: Update CORS query tags and change note

      Show description for 92bca9c
      tausbn

      committed
      92bca9cView commit details

      Copy full SHA for 92bca9c

      View code at this pointBrowse repository at this point
15. Commits on Sep 26, 2024

    • Merge branch 'main' into threat-models

      RasmusWL

      committed
      431a1afView commit details

      Copy full SHA for 431a1af

      View code at this pointBrowse repository at this point
16. Commits on Sep 24, 2024

    • Merge pull request #17305 from Kwstubbs/CORSMiddleware-Starlette

      Show description for 8c015b0
      tausbn

      authored
      8c015b0View commit details

      Copy full SHA for 8c015b0

      View code at this pointBrowse repository at this point
17. Commits on Sep 23, 2024

    • Merge branch 'main' into threat-models

      RasmusWL

      authored
      4a21a85View commit details

      Copy full SHA for 4a21a85

      View code at this pointBrowse repository at this point
18. Commits on Sep 20, 2024

    • Replace uses of StringConstCompare

      joefarebrother

      committed
      3001a57View commit details

      Copy full SHA for 3001a57

      View code at this pointBrowse repository at this point
19. Commits on Sep 13, 2024

    • Reorder and rename

      Kwstubbs

      committed
      c303328View commit details

      Copy full SHA for c303328

      View code at this pointBrowse repository at this point

    • First round feedback

      Kwstubbs

      committed
      831d522View commit details

      Copy full SHA for 831d522

      View code at this pointBrowse repository at this point
20. Commits on Sep 10, 2024

    • Python: Make queries use ActiveThreatModelSource

      RasmusWL

      committed
      528f08fView commit details

      Copy full SHA for 528f08f

      View code at this pointBrowse repository at this point
21. Commits on Sep 5, 2024

    • Merge pull request #16814 from porcupineyhairs/pyCors

      Show description for 959715a
      joefarebrother

      authored
      959715aView commit details

      Copy full SHA for 959715a

      View code at this pointBrowse repository at this point
22. Commits on Sep 3, 2024

    • use my script to delete outdated deprecations

      erik-krogh

      committed
      0fdd06fView commit details

      Copy full SHA for 0fdd06f

      View code at this pointBrowse repository at this point
23. Commits on Sep 2, 2024

    • WIP: Python: CORS Bypass

      Show description for f86570f
      

      Porcupiney Hairs

      committed
      f86570fView commit details

      Copy full SHA for f86570f

      View code at this pointBrowse repository at this point
24. Commits on Aug 27, 2024

    • Grammar

      Kwstubbs

      committed
      c60f459View commit details

      Copy full SHA for c60f459

      View code at this pointBrowse repository at this point

    • Corrections

      Kwstubbs

      committed
      1db7865View commit details

      Copy full SHA for 1db7865

      View code at this pointBrowse repository at this point

    • Add support for vulnerable CORS middlewares

      Kwstubbs

      committed
      8bf8893View commit details

      Copy full SHA for 8bf8893

      View code at this pointBrowse repository at this point