Commits

Commit history

1. Commits on May 18, 2026

   • Release preparation for version 2.25.5

     

     github-actions[bot]

     committed
     e38616aView commit details

     Copy full SHA for e38616a

     View code at this pointBrowse repository at this point
2. Commits on May 12, 2026

   • Merge pull request #21807 from owen-mc/java/improve-qhelp-unsafe-deserialization

     Show description for 0b808e1
     owen-mc

     authored
     0b808e1View commit details

     Copy full SHA for 0b808e1

     View code at this pointBrowse repository at this point
3. Commits on May 8, 2026

   • Note that common standard library types can be vulnerable to gadget-chain attacks

     owen-mc

     committed
     a5ef036View commit details

     Copy full SHA for a5ef036

     View code at this pointBrowse repository at this point

   • Merge pull request #21741 from MarkLee131/fix/path-injection-read-subkind

     Show description for 36554d1
     owen-mc

     authored
     36554d1View commit details

     Copy full SHA for 36554d1

     View code at this pointBrowse repository at this point

   • Merge pull request #21808 from aschackmull/cfg/switch-pattern-eval

     Show description for 81e1ab7
     aschackmull

     authored
     81e1ab7View commit details

     Copy full SHA for 81e1ab7

     View code at this pointBrowse repository at this point
4. Commits on May 7, 2026

   • Merge branch 'main' into fix/path-injection-read-subkind

     MarkLee131

     authored
     26af528View commit details

     Copy full SHA for 26af528

     View code at this pointBrowse repository at this point

   • Fix QL formatting

     owen-mc

     authored
     f9240e7View commit details

     Copy full SHA for f9240e7

     View code at this pointBrowse repository at this point

   • C#/Java: Accept test changes.

     aschackmull

     committed
     6b6df37View commit details

     Copy full SHA for 6b6df37

     View code at this pointBrowse repository at this point

   • C#/Java: Adjust Guards instantiations.

     aschackmull

     committed
     072166bView commit details

     Copy full SHA for 072166b

     View code at this pointBrowse repository at this point

   • Cfg: Rework CFG for switch case patterns.

     aschackmull

     committed
     48785a0View commit details

     Copy full SHA for 48785a0

     View code at this pointBrowse repository at this point

   • Fix yaml formatting

     owen-mc

     authored
     33035dbView commit details

     Copy full SHA for 33035db

     View code at this pointBrowse repository at this point

   • Do not make such a strong security claim

     Show description for f2ea3b9
     

     owen-mc

     and

     Copilot

     authored
     f2ea3b9View commit details

     Copy full SHA for f2ea3b9

     View code at this pointBrowse repository at this point

   • Clarify that deserialization that follows a schema is safe

     owen-mc

     committed
     427b73eView commit details

     Copy full SHA for 427b73e

     View code at this pointBrowse repository at this point

   • Remove double spaces from qhelp

     owen-mc

     committed
     7aa3fd8View commit details

     Copy full SHA for 7aa3fd8

     View code at this pointBrowse repository at this point
5. Commits on May 5, 2026

   • Post-release preparation for codeql-cli-2.25.4

     

     github-actions[bot]

     committed
     7610277View commit details

     Copy full SHA for 7610277

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.25.4

     

     github-actions[bot]

     committed
     88e1d86View commit details

     Copy full SHA for 88e1d86

     View code at this pointBrowse repository at this point
6. Commits on May 4, 2026

   • Merge branch 'main' into fix/path-injection-read-subkind

     MarkLee131

     authored
     4673941View commit details

     Copy full SHA for 4673941

     View code at this pointBrowse repository at this point

   • Merge pull request #21781 from aschackmull/java/rm-deprecated

     Show description for f663ecc
     aschackmull

     authored
     f663eccView commit details

     Copy full SHA for f663ecc

     View code at this pointBrowse repository at this point

   • Java: Fix reference in deprecated code.

     aschackmull

     committed
     c7904b1View commit details

     Copy full SHA for c7904b1

     View code at this pointBrowse repository at this point

   • Java: Delete old deprecated code.

     aschackmull

     committed
     17fded4View commit details

     Copy full SHA for 17fded4

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/org.apache.commons.io.model.yml

     Show description for 49e5886
     

     MarkLee131

     and

     owen-mc

     authored
     49e5886View commit details

     Copy full SHA for 49e5886

     View code at this pointBrowse repository at this point
7. Commits on May 3, 2026

   • Update java/ql/lib/ext/org.apache.commons.io.model.yml

     Show description for c10a05f
     

     MarkLee131

     and

     owen-mc

     authored
     c10a05fView commit details

     Copy full SHA for c10a05f

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/javax.servlet.model.yml

     Show description for 8710e63
     

     MarkLee131

     and

     owen-mc

     authored
     8710e63View commit details

     Copy full SHA for 8710e63

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/org.apache.commons.io.model.yml

     Show description for dbc9d0d
     

     MarkLee131

     and

     owen-mc

     authored
     dbc9d0dView commit details

     Copy full SHA for dbc9d0d

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/java.nio.file.model.yml

     Show description for 9194cda
     

     MarkLee131

     and

     owen-mc

     authored
     9194cdaView commit details

     Copy full SHA for 9194cda

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/java.nio.file.model.yml

     Show description for 7050241
     

     MarkLee131

     and

     owen-mc

     authored
     7050241View commit details

     Copy full SHA for 7050241

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/java.nio.file.model.yml

     Show description for 62a0a3e
     

     MarkLee131

     and

     owen-mc

     authored
     62a0a3eView commit details

     Copy full SHA for 62a0a3e

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/java.nio.file.model.yml

     Show description for 3ad2d8c
     

     MarkLee131

     and

     owen-mc

     authored
     3ad2d8cView commit details

     Copy full SHA for 3ad2d8c

     View code at this pointBrowse repository at this point
8. Commits on May 1, 2026

   • Merge branch 'main' into fix/path-injection-read-subkind

     MarkLee131

     authored
     bafa892View commit details

     Copy full SHA for bafa892

     View code at this pointBrowse repository at this point

   • Java: move File inspection methods to path-injection[read]

     Show description for 119994b
     MarkLee131

     committed
     119994bView commit details

     Copy full SHA for 119994b

     View code at this pointBrowse repository at this point
9. Commits on Apr 30, 2026

   • Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer

     Show description for 87c35e6
     owen-mc

     authored
     87c35e6View commit details

     Copy full SHA for 87c35e6

     View code at this pointBrowse repository at this point

   • Address review comments on path-injection[read] sub-kind

     Show description for 936f0c6
     MarkLee131

     committed
     936f0c6View commit details

     Copy full SHA for 936f0c6

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into fix/path-injection-read-subkind

     MarkLee131

     authored
     90741b1View commit details

     Copy full SHA for 90741b1

     View code at this pointBrowse repository at this point

   • Merge pull request #21759 from hvitved/csharp/cfg-params

     Show description for a473fdb
     hvitved

     authored
     a473fdbView commit details

     Copy full SHA for a473fdb

     View code at this pointBrowse repository at this point
10. Commits on Apr 29, 2026

    • Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer

      Show description for 28a6ff2
      MarkLee131

      committed
      28a6ff2View commit details

      Copy full SHA for 28a6ff2

      View code at this pointBrowse repository at this point