Skip to content
New pull request New
189 Open 6,384 Closed
189 Open 6,384 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Start sharing Concepts across dynamic languages
JS Python Ruby
#8307 opened Mar 1, 2022 by hmac • Draft
Ruby: add rb/clear-text-storage-sensitive-data query
documentation Ruby
#8306 opened Mar 1, 2022 by alexrford • Draft
JS: Refactor the XSS / Client-side-url queries
JS
#8304 opened Mar 1, 2022 by erik-krogh • Draft
Ruby: add taint steps for hash literals
Ruby
#8303 opened Mar 1, 2022 by aibaars • Draft
Ruby: TypeTracker: add smallstep for functions that return their arguments
Ruby
#8302 opened Mar 1, 2022 by aibaars • Review required
2
Data flow: Use parameterized module to share code between pruning stages
C# C++ Java Python Ruby
#8301 opened Mar 1, 2022 by hvitved • Draft
C++: Fix GVN performance on more invalid IR
C# C++ no-change-note-required
#8298 opened Mar 1, 2022 by MathiasVP • Approved
9
JS: Fix ATM timeout on NodeJS
JS no-change-note-required
#8297 opened Mar 1, 2022 by erik-krogh • Approved
4
Fix MaD workflows to be more resilient to missing files
#8294 opened Feb 28, 2022 by tamasvajk • Review required
Ruby: parse more string literals as regular expressions
documentation Ruby
#8293 opened Feb 28, 2022 by aibaars • Review required
JS: configure MaD report generators to include javascript
JS
#8290 opened Feb 28, 2022 by tamasvajk • Draft
Python: Fix syntax error in with test output
depends on internal PR no-change-note-required Python
#8289 opened Feb 28, 2022 by tausbn • Review required
C#: Extensive use of stubs in testcases.
C#
#8279 opened Feb 28, 2022 by michaelnebel • Draft
Python: Add Server-side Request Forgery sinks
Python
#8275 opened Feb 28, 2022 by haby0 • Changes requested
@RasmusWL
6
Ruby: Add rb/tainted-format-string query
documentation Ruby
#8272 opened Feb 28, 2022 by hmac • Draft
2
Ruby: Add OrmWriteAccess concept to model writes to a DB using an ORM
documentation Ruby
#8271 opened Feb 28, 2022 by alexrford • Review required
Java: CWE-200 Query to detect insecure WebResourceResponse implementation
documentation Java
#8257 opened Feb 26, 2022 by luchua-bc • Review required
Python: Prevent magic/inlining in getCase
no-change-note-required Python
#8255 opened Feb 25, 2022 by tausbn • Review required
Ruby: initial prototype of models-as-data
JS no-change-note-required Ruby
#8254 opened Feb 25, 2022 by asgerf • Review required
4
JS: merge hasDominatingWrite and hasDominatingAssignment
JS no-change-note-required
#8253 opened Feb 25, 2022 by erik-krogh • Draft
CPP: Add query for CWE-190: Integer Overflow or Wraparound when using transform after operation
C++ documentation
#8247 opened Feb 25, 2022 by ihsinme • Review required
@MathiasVP
20
CPP: Add query for CWE-754: Improper Check for Unusual or Exceptional Conditions when using functions scanf
C++ documentation
#8246 opened Feb 25, 2022 by ihsinme • Review required
@jketema
25
en CPP: Add query for CWE-476: NULL Pointer Dereference when using exception handling blocks
C++ documentation
#8245 opened Feb 25, 2022 by ihsinme • Review required
@geoffw0
C#: Buildless extractor option.
C# documentation
#8230 opened Feb 24, 2022 by michaelnebel • Changes requested
5
JS: step through parentheses in barrier functions
JS no-change-note-required
#8229 opened Feb 24, 2022 by erik-krogh • Review required
ProTip! Adding no:label will show everything without a label.