Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2k
Star
9.9k
Code
Issues
994
Pull requests
443
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
on
copilot/add-cpp-ecmascript-parser
User selector
All users
All time
Commit history
Commits on Jul 17, 2026
Merge pull request #22207 from github/codeql-spark-run-29493713448
Show description for 87835f7
oscarsj
authored
87835f7
View commit details
Copy full SHA for 87835f7
View code at this point
Browse repository at this point
Commits on Jul 15, 2026
Kotlin: Support Kotlin 2.4.10
jketema
committed
574ef4d
View commit details
Copy full SHA for 574ef4d
View code at this point
Browse repository at this point
Commits on Jul 14, 2026
Merge pull request #22175 from owen-mc/java/fix-path-sanitizer
Show description for 05734dc
owen-mc
authored
05734dc
View commit details
Copy full SHA for 05734dc
View code at this point
Browse repository at this point
Commits on Jul 13, 2026
Address review comment
owen-mc
committed
2d00958
View commit details
Copy full SHA for 2d00958
View code at this point
Browse repository at this point
Merge pull request #22159 from aschackmull/java/join-order-effnonvirt
Show description for 42843f1
michaelnebel
authored
42843f1
View commit details
Copy full SHA for 42843f1
View code at this point
Browse repository at this point
Commits on Jul 11, 2026
Fix path sanitizer
owen-mc
committed
6057b4b
View commit details
Copy full SHA for 6057b4b
View code at this point
Browse repository at this point
Commits on Jul 10, 2026
Java: Improve join order.
Show description for 33261f4
aschackmull
committed
33261f4
View commit details
Copy full SHA for 33261f4
View code at this point
Browse repository at this point
Commits on Jul 9, 2026
Release preparation for version 2.26.1
github-actions[bot]
committed
9acbbb8
View commit details
Copy full SHA for 9acbbb8
View code at this point
Browse repository at this point
Merge pull request #22130 from github/jacknojo/apache_poi_mads
Show description for d5712ef
jacknojo
authored
d5712ef
View commit details
Copy full SHA for d5712ef
View code at this point
Browse repository at this point
Commits on Jul 8, 2026
Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization
Show description for 134e302
owen-mc
authored
134e302
View commit details
Copy full SHA for 134e302
View code at this point
Browse repository at this point
Remove `main` entries
jacknojo
committed
6c7b9f7
View commit details
Copy full SHA for 6c7b9f7
View code at this point
Browse repository at this point
Commits on Jul 7, 2026
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
Show description for 8363d2d
owen-mc
authored
8363d2d
View commit details
Copy full SHA for 8363d2d
View code at this point
Browse repository at this point
Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md
Show description for b8f8370
joshimar
and
owen-mc
authored
b8f8370
View commit details
Copy full SHA for b8f8370
View code at this point
Browse repository at this point
Apply suggestion from @owen-mc
Show description for 6ff2a4c
joshimar
and
owen-mc
authored
6ff2a4c
View commit details
Copy full SHA for 6ff2a4c
View code at this point
Browse repository at this point
Java: Model Spring reactive `WebClient.uri` as a request forgery sink
joshimar
committed
1db3132
View commit details
Copy full SHA for 1db3132
View code at this point
Browse repository at this point
Refactor creating barriers with annotations
owen-mc
committed
a812e4a
View commit details
Copy full SHA for a812e4a
View code at this point
Browse repository at this point
Commits on Jul 6, 2026
Add Changenote
jacknojo
committed
0ca353d
View commit details
Copy full SHA for 0ca353d
View code at this point
Browse repository at this point
Commits on Jul 3, 2026
Add change note
owen-mc
committed
e5bd62d
View commit details
Copy full SHA for e5bd62d
View code at this point
Browse repository at this point
Fix @Pattern sanitizer for TaintedPath
owen-mc
committed
76b4f4f
View commit details
Copy full SHA for 76b4f4f
View code at this point
Browse repository at this point
Add failing TaintedPath test for @Pattern sanitizer
owen-mc
committed
077b531
View commit details
Copy full SHA for 077b531
View code at this point
Browse repository at this point
Commits on Jul 2, 2026
Merge pull request #22061 from MathiasVP/mad-write-through-model
Show description for 4f4cdf4
MathiasVP
authored
4f4cdf4
View commit details
Copy full SHA for 4f4cdf4
View code at this point
Browse repository at this point
Commits on Jul 1, 2026
Merge pull request #22103 from owen-mc/java/fix-mad-file-names
Show description for cb4a1d0
owen-mc
authored
cb4a1d0
View commit details
Copy full SHA for cb4a1d0
View code at this point
Browse repository at this point
Merge pull request #22087 from jketema/subst
Show description for d664d17
jketema
authored
d664d17
View commit details
Copy full SHA for d664d17
View code at this point
Browse repository at this point
Fix misnamed MaD models files
owen-mc
committed
7263c00
View commit details
Copy full SHA for 7263c00
View code at this point
Browse repository at this point
Merge pull request #22079 from geoffw0/kotlininline
Show description for e976608
geoffw0
authored
e976608
View commit details
Copy full SHA for e976608
View code at this point
Browse repository at this point
Fix expected file
jketema
committed
d551ab3
View commit details
Copy full SHA for d551ab3
View code at this point
Browse repository at this point
Add MaDs for Apache POI
jacknojo
committed
4328031
View commit details
Copy full SHA for 4328031
View code at this point
Browse repository at this point
Add Windows integration tests showing that subst is handled inconsistently
jketema
committed
daf97f7
View commit details
Copy full SHA for daf97f7
View code at this point
Browse repository at this point
Commits on Jun 30, 2026
Merge branch 'main' into mad-write-through-model
MathiasVP
committed
b7b731b
View commit details
Copy full SHA for b7b731b
View code at this point
Browse repository at this point
Merge pull request #22077 from geoffw0/javainline
Show description for c0871de
geoffw0
authored
c0871de
View commit details
Copy full SHA for c0871de
View code at this point
Browse repository at this point
Commits on Jun 29, 2026
Kotlin: Update .expected to exactly match reality.
geoffw0
committed
8fc2f7c
View commit details
Copy full SHA for 8fc2f7c
View code at this point
Browse repository at this point
Kotlin: Address inline expectations testFailures.
geoffw0
committed
35cd0f8
View commit details
Copy full SHA for 35cd0f8
View code at this point
Browse repository at this point
Commits on Jun 26, 2026
Merge pull request #22062 from github/mario-campos/mirror-maven-central/gradle
Show description for da3d0cf
mario-campos
authored
da3d0cf
View commit details
Copy full SHA for da3d0cf
View code at this point
Browse repository at this point
Java: Add missing $ Source annotations.
geoffw0
committed
897d169
View commit details
Copy full SHA for 897d169
View code at this point
Browse repository at this point
Java: Label spurious results.
geoffw0
committed
6f997ae
View commit details
Copy full SHA for 6f997ae
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
github-actions[bot]