Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
lib
semmle
javascript
frameworks
on
main
User selector
All users
All time
Commit history
Commits on Aug 5, 2026
Merge pull request #22268 from theinfosecguy/js-response-threat-promise-chain
Show description for bfc7a8b
asgerf
authored
bfc7a8b
View commit details
Copy full SHA for bfc7a8b
View code at this point
Browse repository at this point
Commits on Aug 3, 2026
JS: Fix confusing qldoc
asgerf
committed
b453630
View commit details
Copy full SHA for b453630
View code at this point
Browse repository at this point
Potential fix for pull request finding
Show description for 10f3d90
asgerf
and
Copilot
authored
10f3d90
View commit details
Copy full SHA for 10f3d90
View code at this point
Browse repository at this point
Commits on Aug 1, 2026
JS: Track response data through promises
theinfosecguy
committed
cbdc74e
View commit details
Copy full SHA for cbdc74e
View code at this point
Browse repository at this point
Commits on Jul 31, 2026
JS: Support MaD targeting specific files
Show description for 3cd2f91
asgerf
committed
3cd2f91
View commit details
Copy full SHA for 3cd2f91
View code at this point
Browse repository at this point
Commits on Jul 28, 2026
Update javascript/ql/lib/semmle/javascript/frameworks/Sails.qll
Show description for a6d696a
theinfosecguy
and
asgerf
authored
a6d696a
View commit details
Copy full SHA for a6d696a
View code at this point
Browse repository at this point
Commits on Jul 9, 2026
JS: Model Sails Action2 inputs as remote sources
theinfosecguy
committed
a06a72c
View commit details
Copy full SHA for a06a72c
View code at this point
Browse repository at this point
Commits on Jun 8, 2026
Em-dash - of course :D
BazookaMusic
committed
d0ffde8
View commit details
Copy full SHA for d0ffde8
View code at this point
Browse repository at this point
1. Rename AgentSDK -> AgentSdk
Show description for 2cb0851
BazookaMusic
committed
2cb0851
View commit details
Copy full SHA for 2cb0851
View code at this point
Browse repository at this point
QLDoc + include the queries in the correct expected files per query suite
BazookaMusic
committed
e370af6
View commit details
Copy full SHA for e370af6
View code at this point
Browse repository at this point
Formatting
BazookaMusic
committed
61be37d
View commit details
Copy full SHA for 61be37d
View code at this point
Browse repository at this point
Commits on Jun 4, 2026
add openrouter support
BazookaMusic
committed
078d15e
View commit details
Copy full SHA for 078d15e
View code at this point
Browse repository at this point
Commits on May 20, 2026
move system prompt injection to non-experimental
BazookaMusic
committed
6c5c8e1
View commit details
Copy full SHA for 6c5c8e1
View code at this point
Browse repository at this point
Commits on Apr 28, 2026
Model res.json and res.jsonp as Vercel response sinks
Show description for 18b06f1
murderteeth
and
claude
committed
18b06f1
View commit details
Copy full SHA for 18b06f1
View code at this point
Browse repository at this point
Commits on Apr 25, 2026
Merge branch 'main' into js/vercel-node-framework
murderteeth
authored
a6dba9e
View commit details
Copy full SHA for a6dba9e
View code at this point
Browse repository at this point
Commits on Apr 13, 2026
Address Copilot review nits
Show description for 4791532
murderteeth
and
claude
committed
4791532
View commit details
Copy full SHA for 4791532
View code at this point
Browse repository at this point
Recognize legacy @now/node type aliases
Show description for cff0734
murderteeth
and
claude
committed
cff0734
View commit details
Copy full SHA for cff0734
View code at this point
Browse repository at this point
Commits on Apr 12, 2026
JS: Add support for @vercel/node serverless functions
Show description for dfe0559
murderteeth
and
claude
committed
dfe0559
View commit details
Copy full SHA for dfe0559
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Replace `branch` with `acceptingValue`
owen-mc
committed
37aac05
View commit details
Copy full SHA for 37aac05
View code at this point
Browse repository at this point
Add barriers and barrier guards to MaD format explanations
owen-mc
committed
10fddc7
View commit details
Copy full SHA for 10fddc7
View code at this point
Browse repository at this point
Commits on Mar 11, 2026
JS: Add browser source kinds
asgerf
committed
1253553
View commit details
Copy full SHA for 1253553
View code at this point
Browse repository at this point
Commits on Feb 25, 2026
Merge pull request #21349 from asgerf/mobx-wrapper
Show description for f0e665d
asgerf
authored
f0e665d
View commit details
Copy full SHA for f0e665d
View code at this point
Browse repository at this point
Commits on Feb 19, 2026
JS: Model mobx-react{-lite} as higher-order component builders
asgerf
committed
a684943
View commit details
Copy full SHA for a684943
View code at this point
Browse repository at this point
Commits on Feb 17, 2026
Revert "javascript: add MaD model"
Show description for b8f9dd9
owen-mc
committed
b8f9dd9
View commit details
Copy full SHA for b8f9dd9
View code at this point
Browse repository at this point
Commits on Jan 26, 2026
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
Show description for b974a84
hvitved
authored
b974a84
View commit details
Copy full SHA for b974a84
View code at this point
Browse repository at this point
JS: Adapt to changes in `FlowSummaryImpl`
hvitved
committed
93dad86
View commit details
Copy full SHA for 93dad86
View code at this point
Browse repository at this point
Commits on Jan 22, 2026
python/javascript/ruby: mark internal predicates
yoff
committed
d05901a
View commit details
Copy full SHA for d05901a
View code at this point
Browse repository at this point
javascript: add MaD model
Show description for 75bd4a7
yoff
committed
75bd4a7
View commit details
Copy full SHA for 75bd4a7
View code at this point
Browse repository at this point
python: add machinery for MaD barriers
Show description for 3dbfb9f
yoff
committed
3dbfb9f
View commit details
Copy full SHA for 3dbfb9f
View code at this point
Browse repository at this point
Commits on Jan 19, 2026
Merge pull request #21159 from asgerf/js/vue-prop-function
Show description for 077bbb2
asgerf
authored
077bbb2
View commit details
Copy full SHA for 077bbb2
View code at this point
Browse repository at this point
Commits on Jan 14, 2026
Merge pull request #20733 from asgerf/js/incremental-api-graphs
Show description for ff58041
asgerf
authored
ff58041
View commit details
Copy full SHA for ff58041
View code at this point
Browse repository at this point
Merge pull request #20916 from asgerf/js/next-folders2
Show description for e430aa9
asgerf
authored
e430aa9
View commit details
Copy full SHA for e430aa9
View code at this point
Browse repository at this point
Commits on Jan 13, 2026
JS: Add support for props callbacks in router configs
asgerf
committed
7cd820e
View commit details
Copy full SHA for 7cd820e
View code at this point
Browse repository at this point
Merge pull request #20918 from asgerf/js/response-default-content-type
Show description for ca52fe5
asgerf
authored
ca52fe5
View commit details
Copy full SHA for ca52fe5
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll
Show description for d2e6ae5
asgerf
and
Napalys
authored
d2e6ae5
View commit details
Copy full SHA for d2e6ae5
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.