github/codeql

CWE-918 (SSRF) - Java - False Positive Justification

false-positive

#20117

· gautamkct opened

on Jul 23, 2025

Python: Aiopg.qll misses some SQL injection sinks in aiopg

question

#20111

· MagicXiaoBai1 opened

on Jul 23, 2025

CodeQL detected code written in <code>some language</code>, but not any written in GitHub Actions. Confirm that there is some source code for GitHub Actions in the project.

question

#20102

· jyio-va opened

on Jul 21, 2025

UnvalidatedDynamicMethodCall query does not detect flow inside try/catch

question

#20098

· fguisso opened

on Jul 21, 2025

False positive: Full server-side request forgery

false-positive

#20093

· markdboyd opened

on Jul 18, 2025

General issue - When using <code>--build-mode=none</code>, Windows builds produce <code>Extraction error: 'MsvcCompiler' object has no attribute 'clangpp'</code>

question

#20071

· szigetics opened

on Jul 17, 2025

False positive: go/zipslip when <code>filepath.IsLocal</code> is already used

false-positive

#20043

· dagood opened

on Jul 14, 2025

General issue: Find the annotated type of a C# base interface

question

#20032

· rpmrmartin opened

on Jul 11, 2025

[Rust] weird behavior in dataflow when trying to select a specific node

question

#19983

· intrigus-lgtm opened

on Jul 5, 2025

[Rust] macro expansion failed warnings 2

question

#19982

· intrigus-lgtm opened

on Jul 5, 2025

Problem installing local package

question

#19979

· shargon opened

on Jul 4, 2025

Solidity code

enhancement

#19972

· shargon opened

on Jul 3, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

CWE-918 (SSRF) - Java - False Positive Justification

Python: Aiopg.qll misses some SQL injection sinks in aiopg

CodeQL detected code written in <code>some language</code>, but not any written in GitHub Actions. Confirm that there is some source code for GitHub Actions in the project.

UnvalidatedDynamicMethodCall query does not detect flow inside try/catch

False positive: Full server-side request forgery

General issue - When using <code>--build-mode=none</code>, Windows builds produce <code>Extraction error: 'MsvcCompiler' object has no attribute 'clangpp'</code>

False positive: go/zipslip when <code>filepath.IsLocal</code> is already used

General issue: Find the annotated type of a C# base interface

[Rust] weird behavior in dataflow when trying to select a specific node

[Rust] macro expansion failed warnings 2

Problem installing local package

Solidity code

Issues

Search results