Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2k
Star
9.9k
Code
Issues
995
Pull requests
443
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
experimental
on
codeql-cli/latest
User selector
All users
All time
Commit history
Commits on Jun 8, 2026
1. Rename AgentSDK -> AgentSdk
Show description for 2cb0851
BazookaMusic
committed
2cb0851
View commit details
Copy full SHA for 2cb0851
View code at this point
Browse repository at this point
Commits on Jan 29, 2026
python: Add query for prompt injection
Show description for e7a0fc7
yoff
committed
e7a0fc7
View commit details
Copy full SHA for e7a0fc7
View code at this point
Browse repository at this point
Commits on Jan 7, 2026
Python: Use correct first parameter name for zstd call
Show description for 8602a2d
tausbn
and
yoff
authored
8602a2d
View commit details
Copy full SHA for 8602a2d
View code at this point
Browse repository at this point
Commits on Dec 9, 2025
Python: Add modelling for `zstd.compression`
Show description for ad68a5e
tausbn
committed
ad68a5e
View commit details
Copy full SHA for ad68a5e
View code at this point
Browse repository at this point
Commits on Nov 26, 2025
Remove trailing periods from @name metadata in query files
Show description for caf6b95
felicitymay
committed
caf6b95
View commit details
Copy full SHA for caf6b95
View code at this point
Browse repository at this point
Commits on Oct 28, 2025
Python/LdapInsecureAuth
Show description for 1ff24cb
d10c
committed
1ff24cb
View commit details
Copy full SHA for 1ff24cb
View code at this point
Browse repository at this point
Python/CorsBypass
d10c
committed
998de14
View commit details
Copy full SHA for 998de14
View code at this point
Browse repository at this point
Python/UnsafeUsageOfClientSideEncryptionVersion
d10c
committed
4bc9ede
View commit details
Copy full SHA for 4bc9ede
View code at this point
Browse repository at this point
Python/UnsafeUnpackQuery
Show description for 6d57316
d10c
committed
6d57316
View commit details
Copy full SHA for 6d57316
View code at this point
Browse repository at this point
Commits on Sep 1, 2025
Python: Fix some Ql4Ql violations.
michaelnebel
committed
dbd3125
View commit details
Copy full SHA for dbd3125
View code at this point
Browse repository at this point
Commits on Jul 17, 2025
[DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash
d10c
committed
20030d5
View commit details
Copy full SHA for 20030d5
View code at this point
Browse repository at this point
Commits on Jun 17, 2025
Python: mass enable diff-informed data flow `none()` location overrides
Show description for b79ce6d
d10c
committed
b79ce6d
View commit details
Copy full SHA for b79ce6d
View code at this point
Browse repository at this point
Commits on Apr 30, 2025
Fix cwe tags to include leading zero
owen-mc
committed
cf614a5
View commit details
Copy full SHA for cf614a5
View code at this point
Browse repository at this point
Commits on Feb 6, 2025
Python: resolve remaining TODOs
asgerf
committed
d3ee658
View commit details
Copy full SHA for d3ee658
View code at this point
Browse repository at this point
Python: ignore experimental for now
asgerf
committed
15c2ccb
View commit details
Copy full SHA for 15c2ccb
View code at this point
Browse repository at this point
Python: mass enable diff-informed data flow
asgerf
committed
e4a1847
View commit details
Copy full SHA for e4a1847
View code at this point
Browse repository at this point
Commits on Dec 9, 2024
Remove experimental version + qhelp fixes
joefarebrother
committed
4602c5c
View commit details
Copy full SHA for 4602c5c
View code at this point
Browse repository at this point
Promote jinja sinks
joefarebrother
committed
60d8a85
View commit details
Copy full SHA for 60d8a85
View code at this point
Browse repository at this point
Copy template injection to standard pack + add jinja sinks
joefarebrother
committed
8647073
View commit details
Copy full SHA for 8647073
View code at this point
Browse repository at this point
Commits on Oct 8, 2024
Python: Update CORS query tags and change note
Show description for 92bca9c
tausbn
committed
92bca9c
View commit details
Copy full SHA for 92bca9c
View code at this point
Browse repository at this point
Commits on Sep 26, 2024
Merge branch 'main' into threat-models
RasmusWL
committed
431a1af
View commit details
Copy full SHA for 431a1af
View code at this point
Browse repository at this point
Commits on Sep 24, 2024
Merge pull request #17305 from Kwstubbs/CORSMiddleware-Starlette
Show description for 8c015b0
tausbn
authored
8c015b0
View commit details
Copy full SHA for 8c015b0
View code at this point
Browse repository at this point
Commits on Sep 23, 2024
Merge branch 'main' into threat-models
RasmusWL
authored
4a21a85
View commit details
Copy full SHA for 4a21a85
View code at this point
Browse repository at this point
Commits on Sep 20, 2024
Replace uses of StringConstCompare
joefarebrother
committed
3001a57
View commit details
Copy full SHA for 3001a57
View code at this point
Browse repository at this point
Commits on Sep 13, 2024
Reorder and rename
Kwstubbs
committed
c303328
View commit details
Copy full SHA for c303328
View code at this point
Browse repository at this point
First round feedback
Kwstubbs
committed
831d522
View commit details
Copy full SHA for 831d522
View code at this point
Browse repository at this point
Commits on Sep 10, 2024
Python: Make queries use ActiveThreatModelSource
RasmusWL
committed
528f08f
View commit details
Copy full SHA for 528f08f
View code at this point
Browse repository at this point
Commits on Sep 5, 2024
Merge pull request #16814 from porcupineyhairs/pyCors
Show description for 959715a
joefarebrother
authored
959715a
View commit details
Copy full SHA for 959715a
View code at this point
Browse repository at this point
Commits on Sep 3, 2024
use my script to delete outdated deprecations
erik-krogh
committed
0fdd06f
View commit details
Copy full SHA for 0fdd06f
View code at this point
Browse repository at this point
Commits on Sep 2, 2024
WIP: Python: CORS Bypass
Show description for f86570f
Porcupiney Hairs
committed
f86570f
View commit details
Copy full SHA for f86570f
View code at this point
Browse repository at this point
Commits on Aug 27, 2024
Grammar
Kwstubbs
committed
c60f459
View commit details
Copy full SHA for c60f459
View code at this point
Browse repository at this point
Corrections
Kwstubbs
committed
1db7865
View commit details
Copy full SHA for 1db7865
View code at this point
Browse repository at this point
Add support for vulnerable CORS middlewares
Kwstubbs
committed
8bf8893
View commit details
Copy full SHA for 8bf8893
View code at this point
Browse repository at this point
Commits on Jul 29, 2024
Merge branch 'main' into python-cookie-concept-promote
joefarebrother
committed
1127b08
View commit details
Copy full SHA for 1127b08
View code at this point
Browse repository at this point
Commits on Jul 25, 2024
Remove unneeded experimental file
joefarebrother
committed
ebeb187
View commit details
Copy full SHA for ebeb187
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
Porcupiney Hairs