Search results

General issue: CWE-116 not reported for unescaped XML output in JavaScript/TypeScript

questionFurther information is requestedFurther information is requested

Status: Open.

#21022In github/codeql;

· aniakowalewska1 opened on Dec 12, 2025

General issue: CWE-208 coverage for javascript

questionFurther information is requestedFurther information is requested

Status: Open.

#21021In github/codeql;

· aniakowalewska1 opened on Dec 12, 2025

[csharp] sql injection detection not working?

questionFurther information is requestedFurther information is requested

Status: Open.

#21003In github/codeql;

· indy-singh opened on Dec 10, 2025

Unable to create database on latest Linux kernel

bugSomething isn't workingSomething isn't working

C++

questionFurther information is requestedFurther information is requested

Status: Open.

#20978In github/codeql;

· ftyghome opened on Dec 7, 2025

LeakSanitizer detects memory leak from CodeQL <code>x86_64-linux-gnu_x86_64_trace.so</code> when executing Rust fuzzing test in OneBranch pipeline

questionFurther information is requestedFurther information is requested

Status: Open.

#20976In github/codeql;

· cwshugg opened on Dec 5, 2025

[Python] False Negative: Taint flow fails to penetrate function-local class definitions

questionFurther information is requestedFurther information is requested

Status: Open.

#20947In github/codeql;

· android1257 opened on Dec 2, 2025

Can CodeQL add support for YAML configuration files parse on java lib?

questionFurther information is requestedFurther information is requested

Status: Open.

#20905In github/codeql;

· J0o1ey opened on Nov 25, 2025

C path matching issue

acknowledgedGitHub staff acknowledges this issueGitHub staff acknowledges this issue

questionFurther information is requestedFurther information is requested

Status: Open.

#20882In github/codeql;

· foxbyte9 opened on Nov 21, 2025

CFG for shell script in CodeQL

acknowledgedGitHub staff acknowledges this issueGitHub staff acknowledges this issue

awaiting-responseThe CodeQL team is awaiting further input or clarification from the original reporter of this issue.The CodeQL team is awaiting further input or clarification from the original reporter of this issue.

questionFurther information is requestedFurther information is requested

Stale

Status: Open.

#20856In github/codeql;

· rizwanhrizvi opened on Nov 17, 2025

General issue: XSS vulnerabilities (CWE-79/CWE-116) not detected in React/Next.js .tsx components

acknowledgedGitHub staff acknowledges this issueGitHub staff acknowledges this issue

bugSomething isn't workingSomething isn't working

JS

Status: Open.

#20846In github/codeql;

· aniakowalewska1 opened on Nov 17, 2025

False positive: Dereferenced variable may be null ignore NRT attributes

C#

false-positive

Status: Open.

#20828In github/codeql;

· Euan-McVie opened on Nov 12, 2025

.NET 10 Support

questionFurther information is requestedFurther information is requested

Status: Open.

#20827In github/codeql;

· wsugarman opened on Nov 12, 2025