Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
ext
on
codeql-cli-2.26.3
User selector
All users
All time
Commit history
Commits on Jul 11, 2026
Fix path sanitizer
owen-mc
committed
6057b4b
View commit details
Copy full SHA for 6057b4b
View code at this point
Browse repository at this point
Commits on Jul 9, 2026
Merge pull request #22130 from github/jacknojo/apache_poi_mads
Show description for d5712ef
jacknojo
authored
d5712ef
View commit details
Copy full SHA for d5712ef
View code at this point
Browse repository at this point
Commits on Jul 8, 2026
Remove `main` entries
jacknojo
committed
6c7b9f7
View commit details
Copy full SHA for 6c7b9f7
View code at this point
Browse repository at this point
Commits on Jul 7, 2026
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
Show description for 8363d2d
owen-mc
authored
8363d2d
View commit details
Copy full SHA for 8363d2d
View code at this point
Browse repository at this point
Apply suggestion from @owen-mc
Show description for 6ff2a4c
joshimar
and
owen-mc
authored
6ff2a4c
View commit details
Copy full SHA for 6ff2a4c
View code at this point
Browse repository at this point
Java: Model Spring reactive `WebClient.uri` as a request forgery sink
joshimar
committed
1db3132
View commit details
Copy full SHA for 1db3132
View code at this point
Browse repository at this point
Commits on Jul 1, 2026
Fix misnamed MaD models files
owen-mc
committed
7263c00
View commit details
Copy full SHA for 7263c00
View code at this point
Browse repository at this point
Add MaDs for Apache POI
jacknojo
committed
4328031
View commit details
Copy full SHA for 4328031
View code at this point
Browse repository at this point
Commits on Jun 3, 2026
Merge pull request #21804 from github/copilot/add-tests-for-models
Show description for 52f2a58
owen-mc
authored
52f2a58
View commit details
Copy full SHA for 52f2a58
View code at this point
Browse repository at this point
Commits on May 28, 2026
Add summary models for `org.apache.http.client.methods.RequestBuilder`
Show description for 8937e22
owen-mc
committed
8937e22
View commit details
Copy full SHA for 8937e22
View code at this point
Browse repository at this point
Commits on May 19, 2026
Add MaDs for Apache Avro
jacknojo
committed
3119ef6
View commit details
Copy full SHA for 3119ef6
View code at this point
Browse repository at this point
Commits on May 7, 2026
Fix yaml formatting
owen-mc
authored
33035db
View commit details
Copy full SHA for 33035db
View code at this point
Browse repository at this point
Commits on May 6, 2026
Replace fluent SSRF changes with Apache HttpClient execute model tests
Show description for 043ec85
Copilot
and
owen-mc
authored
043ec85
View commit details
Copy full SHA for 043ec85
View code at this point
Browse repository at this point
Commits on May 4, 2026
Update java/ql/lib/ext/org.apache.commons.io.model.yml
Show description for 49e5886
MarkLee131
and
owen-mc
authored
49e5886
View commit details
Copy full SHA for 49e5886
View code at this point
Browse repository at this point
Commits on May 3, 2026
Update java/ql/lib/ext/org.apache.commons.io.model.yml
Show description for c10a05f
MarkLee131
and
owen-mc
authored
c10a05f
View commit details
Copy full SHA for c10a05f
View code at this point
Browse repository at this point
Update java/ql/lib/ext/javax.servlet.model.yml
Show description for 8710e63
MarkLee131
and
owen-mc
authored
8710e63
View commit details
Copy full SHA for 8710e63
View code at this point
Browse repository at this point
Update java/ql/lib/ext/org.apache.commons.io.model.yml
Show description for dbc9d0d
MarkLee131
and
owen-mc
authored
dbc9d0d
View commit details
Copy full SHA for dbc9d0d
View code at this point
Browse repository at this point
Update java/ql/lib/ext/java.nio.file.model.yml
Show description for 9194cda
MarkLee131
and
owen-mc
authored
9194cda
View commit details
Copy full SHA for 9194cda
View code at this point
Browse repository at this point
Update java/ql/lib/ext/java.nio.file.model.yml
Show description for 7050241
MarkLee131
and
owen-mc
authored
7050241
View commit details
Copy full SHA for 7050241
View code at this point
Browse repository at this point
Update java/ql/lib/ext/java.nio.file.model.yml
Show description for 62a0a3e
MarkLee131
and
owen-mc
authored
62a0a3e
View commit details
Copy full SHA for 62a0a3e
View code at this point
Browse repository at this point
Update java/ql/lib/ext/java.nio.file.model.yml
Show description for 3ad2d8c
MarkLee131
and
owen-mc
authored
3ad2d8c
View commit details
Copy full SHA for 3ad2d8c
View code at this point
Browse repository at this point
Commits on May 1, 2026
Java: move File inspection methods to path-injection[read]
Show description for 119994b
MarkLee131
committed
119994b
View commit details
Copy full SHA for 119994b
View code at this point
Browse repository at this point
Commits on Apr 30, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
90741b1
View commit details
Copy full SHA for 90741b1
View code at this point
Browse repository at this point
Commits on Apr 24, 2026
Move generated MaDs for Java into modelgenerator/
jacknojo
committed
6ec2509
View commit details
Copy full SHA for 6ec2509
View code at this point
Browse repository at this point
Commits on Apr 23, 2026
Model additional Hibernate query sinks
Show description for 25d232b
Copilot
and
owen-mc
authored
25d232b
View commit details
Copy full SHA for 25d232b
View code at this point
Browse repository at this point
Commits on Apr 20, 2026
Java: split read-only path sinks into path-injection[read]
Show description for c336a15
MarkLee131
committed
c336a15
View commit details
Copy full SHA for c336a15
View code at this point
Browse repository at this point
Commits on Mar 5, 2026
Fix incorrect constructor summary models
owen-mc
committed
579c871
View commit details
Copy full SHA for 579c871
View code at this point
Browse repository at this point
Commits on Jan 26, 2026
Java: Adapt to changes in `FlowSummaryImpl`
Show description for 7024b07
hvitved
committed
7024b07
View commit details
Copy full SHA for 7024b07
View code at this point
Browse repository at this point
Commits on Jan 14, 2026
Improved models for `Supplier` arguments
mbaluda
committed
f71b6c1
View commit details
Copy full SHA for f71b6c1
View code at this point
Browse repository at this point
Commits on Jan 13, 2026
Improve model for CWE-089
mbaluda
committed
d335f03
View commit details
Copy full SHA for d335f03
View code at this point
Browse repository at this point
rename change notes
mbaluda
committed
dda042f
View commit details
Copy full SHA for dda042f
View code at this point
Browse repository at this point
Commits on Jan 9, 2026
Merge branch 'github:main' into couchdb
mbaluda
authored
4c8058d
View commit details
Copy full SHA for 4c8058d
View code at this point
Browse repository at this point
Commits on Jan 8, 2026
Merge pull request #17590 from Kwstubbs/java-mad-test
Show description for 8a80158
owen-mc
authored
8a80158
View commit details
Copy full SHA for 8a80158
View code at this point
Browse repository at this point
Commits on Jan 7, 2026
Merge pull request #20999 from joefarebrother/java-spring-websocket
Show description for 6a3c74c
owen-mc
authored
6a3c74c
View commit details
Copy full SHA for 6a3c74c
View code at this point
Browse repository at this point
Add model for `handlePongMessage` and update test
owen-mc
authored
6c291e1
View commit details
Copy full SHA for 6c291e1
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.