Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
lib
semmle
javascript
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jun 30, 2026
Merge branch 'main' into mad-write-through-model
MathiasVP
committed
b7b731b
View commit details
Copy full SHA for b7b731b
View code at this point
Browse repository at this point
Commits on Jun 23, 2026
JS: Fixes after changes to the flow summary API.
MathiasVP
committed
be56df7
View commit details
Copy full SHA for be56df7
View code at this point
Browse repository at this point
Address review: restrict @HostListener handler to window/document message targets
Show description for d1d9df7
felickz
and
Copilot
committed
d1d9df7
View commit details
Copy full SHA for d1d9df7
View code at this point
Browse repository at this point
JavaScript: Recognize Angular @HostListener('window:message') as a postMessage handler
Show description for 9bffcf8
felickz
and
Copilot
committed
9bffcf8
View commit details
Copy full SHA for 9bffcf8
View code at this point
Browse repository at this point
Commits on Jun 17, 2026
Merge branch 'main' into bazookamusic/cwe-1427
BazookaMusic
authored
57f2006
View commit details
Copy full SHA for 57f2006
View code at this point
Browse repository at this point
Merge branch 'main' into add-yaml-comments
MathiasVP
committed
c12cf88
View commit details
Copy full SHA for c12cf88
View code at this point
Browse repository at this point
Commits on Jun 15, 2026
Merge branch 'main' into bazookamusic/cwe-1427
BazookaMusic
authored
7c11f19
View commit details
Copy full SHA for 7c11f19
View code at this point
Browse repository at this point
Commits on Jun 11, 2026
Promote user prompt injection query to stable security
Show description for e612db2
BazookaMusic
committed
e612db2
View commit details
Copy full SHA for e612db2
View code at this point
Browse repository at this point
Commits on Jun 8, 2026
Em-dash - of course :D
BazookaMusic
committed
d0ffde8
View commit details
Copy full SHA for d0ffde8
View code at this point
Browse repository at this point
1. Rename AgentSDK -> AgentSdk
Show description for 2cb0851
BazookaMusic
committed
2cb0851
View commit details
Copy full SHA for 2cb0851
View code at this point
Browse repository at this point
QLDoc + include the queries in the correct expected files per query suite
BazookaMusic
committed
e370af6
View commit details
Copy full SHA for e370af6
View code at this point
Browse repository at this point
Formatting
BazookaMusic
committed
61be37d
View commit details
Copy full SHA for 61be37d
View code at this point
Browse repository at this point
Commits on Jun 4, 2026
JS: Support YAML comments.
MathiasVP
committed
58b1a05
View commit details
Copy full SHA for 58b1a05
View code at this point
Browse repository at this point
add openrouter support
BazookaMusic
committed
078d15e
View commit details
Copy full SHA for 078d15e
View code at this point
Browse repository at this point
Commits on May 20, 2026
move system prompt injection to non-experimental
BazookaMusic
committed
6c5c8e1
View commit details
Copy full SHA for 6c5c8e1
View code at this point
Browse repository at this point
Commits on May 5, 2026
Add UseMemoDirective and UseNoMemoDirective classes
mattcosta7
authored
640b17e
View commit details
Copy full SHA for 640b17e
View code at this point
Browse repository at this point
Commits on Apr 30, 2026
JS: Add prompt injection detection (CWE-1427) for OpenAI, Anthropic, and Google GenAI SDKs
Show description for 0b7133c
BazookaMusic
committed
0b7133c
View commit details
Copy full SHA for 0b7133c
View code at this point
Browse repository at this point
Commits on Apr 28, 2026
Model res.json and res.jsonp as Vercel response sinks
Show description for 18b06f1
murderteeth
and
claude
committed
18b06f1
View commit details
Copy full SHA for 18b06f1
View code at this point
Browse repository at this point
Commits on Apr 25, 2026
Merge branch 'main' into js/vercel-node-framework
murderteeth
authored
a6dba9e
View commit details
Copy full SHA for a6dba9e
View code at this point
Browse repository at this point
Commits on Apr 14, 2026
Merge pull request #21584 from owen-mc/shared/update-mad-comments
Show description for 7458674
owen-mc
authored
7458674
View commit details
Copy full SHA for 7458674
View code at this point
Browse repository at this point
Commits on Apr 13, 2026
Address Copilot review nits
Show description for 4791532
murderteeth
and
claude
committed
4791532
View commit details
Copy full SHA for 4791532
View code at this point
Browse repository at this point
Recognize legacy @now/node type aliases
Show description for cff0734
murderteeth
and
claude
committed
cff0734
View commit details
Copy full SHA for cff0734
View code at this point
Browse repository at this point
JS: Recognize Fastify per-route rate limiting
hvitved
committed
7a48409
View commit details
Copy full SHA for 7a48409
View code at this point
Browse repository at this point
Commits on Apr 12, 2026
JS: Add support for @vercel/node serverless functions
Show description for dfe0559
murderteeth
and
claude
committed
dfe0559
View commit details
Copy full SHA for dfe0559
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Replace `branch` with `acceptingValue`
owen-mc
committed
37aac05
View commit details
Copy full SHA for 37aac05
View code at this point
Browse repository at this point
Add barriers and barrier guards to MaD format explanations
owen-mc
committed
10fddc7
View commit details
Copy full SHA for 10fddc7
View code at this point
Browse repository at this point
Commits on Mar 13, 2026
JS: Address PR review comments
Show description for 821cc0e
asgerf
and
Copilot
committed
821cc0e
View commit details
Copy full SHA for 821cc0e
View code at this point
Browse repository at this point
Commits on Mar 11, 2026
JS: Add browser source kinds
asgerf
committed
1253553
View commit details
Copy full SHA for 1253553
View code at this point
Browse repository at this point
Commits on Feb 25, 2026
Merge pull request #21349 from asgerf/mobx-wrapper
Show description for f0e665d
asgerf
authored
f0e665d
View commit details
Copy full SHA for f0e665d
View code at this point
Browse repository at this point
Commits on Feb 19, 2026
JS: Model mobx-react{-lite} as higher-order component builders
asgerf
committed
a684943
View commit details
Copy full SHA for a684943
View code at this point
Browse repository at this point
Commits on Feb 17, 2026
Revert "javascript: remove sanitizer to be replaced by model"
Show description for 05f9b41
owen-mc
committed
05f9b41
View commit details
Copy full SHA for 05f9b41
View code at this point
Browse repository at this point
Revert "javascript: add MaD model"
Show description for b8f9dd9
owen-mc
committed
b8f9dd9
View commit details
Copy full SHA for b8f9dd9
View code at this point
Browse repository at this point
Accept MaD sanitizers for queries with MaD sinks
owen-mc
committed
61e8f91
View commit details
Copy full SHA for 61e8f91
View code at this point
Browse repository at this point
Commits on Jan 26, 2026
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
Show description for b974a84
hvitved
authored
b974a84
View commit details
Copy full SHA for b974a84
View code at this point
Browse repository at this point
JS: Adapt to changes in `FlowSummaryImpl`
hvitved
committed
93dad86
View commit details
Copy full SHA for 93dad86
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.