CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
This report summarizes scanner evidence for github/codeql, a CodeQL project with 10,186 GitHub stars. SynthScan examined 1,000,804 lines of code across 21313 source files, recording 3004 pattern matches distributed across 26 syntactic categories. The legacy adjusted pattern signal is 4.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1473 finding(s).
Are imports declared and package/API names verified? 855 finding(s).
Are wrappers, guards, and repeated structures necessary? 1292 finding(s).
Which changes need focused human review? 3004 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3004 distinct pattern matches across 26 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | misc/codegen/lib/render.py | 222 | except FileNotFoundError: | CODE |
| HIGH | misc/scripts/generate-code-scanning-query-list.py | 156 | except: | CODE |
| HIGH | misc/scripts/patch_query_history.py | 92 | except OSError: | CODE |
| HIGH | …ols/recorded-call-graph-metrics/src/cg_trace/tracer.py | 133 | except ValueError: | CODE |
| HIGH | python/extractor/make_zips.py | 18 | except KeyError: | CODE |
| HIGH | python/extractor/make_zips.py | 22 | except KeyError: | CODE |
| HIGH | python/extractor/make_zips.py | 26 | except KeyError: | CODE |
| HIGH | python/extractor/make_zips.py | 30 | except KeyError: | CODE |
| HIGH | python/extractor/buildtools/version.py | 51 | except Exception: | CODE |
| HIGH | python/extractor/lark/tree.py | 3 | except ImportError: | CODE |
| HIGH | python/extractor/lark/visitors.py | 45 | except Discard: | CODE |
| HIGH | python/extractor/lark/lark.py | 122 | except AttributeError: | CODE |
| HIGH | python/extractor/lark/utils.py | 94 | except excs: | CODE |
| HIGH | python/extractor/lark/exceptions.py | 45 | except AttributeError: | CODE |
| HIGH | python/extractor/lark/parsers/resolve_ambig.py | 20 | except AttributeError: | CODE |
| HIGH | python/extractor/semmle/worker.py | 239 | except _Empty: | CODE |
| HIGH | python/extractor/semmle/worker.py | 374 | except _Empty: | CODE |
| HIGH | python/extractor/semmle/worker.py | 185 | except _Empty: | CODE |
| HIGH | python/extractor/semmle/logging.py | 180 | except KeyboardInterrupt: | CODE |
| HIGH | python/extractor/semmle/logging.py | 211 | except Exception: | CODE |
| HIGH | python/extractor/semmle/cache.py | 123 | except Exception: | CODE |
| HIGH | python/extractor/semmle/cache.py | 118 | except Exception: | CODE |
| HIGH | python/extractor/semmle/cache.py | 146 | except Exception: | CODE |
| HIGH | python/extractor/semmle/cache.py | 105 | except Exception: | CODE |
| HIGH | python/extractor/semmle/cache.py | 171 | except Exception: | CODE |
| HIGH | python/extractor/semmle/cache.py | 187 | except Exception: | CODE |
| HIGH | python/extractor/semmle/python/passes/objects.py | 296 | except UnicodeEncodeError: | CODE |
| HIGH | python/extractor/semmle/python/parser/ast.py | 567 | except StopIteration: | CODE |
| HIGH | python/extractor/semmle/python/parser/ast.py | 619 | except StopIteration: | CODE |
| HIGH | python/extractor/blib2to3/pgen2/tokenize.py | 168 | except StopTokenizing: | CODE |
| HIGH | python/ql/test/query-tests/Metrics/cyclo/code.py | 41 | except IOError: | CODE |
| HIGH | …-tests/Resources/FileNotAlwaysClosed/resources_test.py | 134 | except IOError: | CODE |
| HIGH | …-tests/Resources/FileNotAlwaysClosed/resources_test.py | 257 | except: | CODE |
| HIGH | …on/ql/test/query-tests/Exceptions/general/pypy_test.py | 14 | except 42: | CODE |
| HIGH | …on/ql/test/query-tests/Exceptions/general/pypy_test.py | 17 | except A: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 72 | except ValueError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 74 | except MyExc: # $ MISSING:Alert[py/unreachable-except] # Missing due to dataflow limitiation preventing MyExc from being | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 85 | except MyBaseExc: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 87 | except MySubExc: # $ MISSING:Alert[py/unreachable-except] # Missing due to dataflow limitation preventing MyExc from bei | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 89 | except Exception: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 7 | except: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 13 | except TypeError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 19 | except Error: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 28 | except Error: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 97 | except BaseException: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 144 | except StopIteration: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 160 | except IOError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 167 | except AttributeError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 173 | except IndexError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 179 | except IndexError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 185 | except AttributeError: | CODE |
| HIGH | …test/query-tests/Exceptions/general/exceptions_test.py | 191 | except UnicodeEncodeError: | CODE |
| HIGH | …hon/ql/test/query-tests/Statements/unreachable/test.py | 84 | except NameError: # $ Alert # Unreachable 'str' is always defined | CODE |
| HIGH | …hon/ql/test/query-tests/Statements/unreachable/test.py | 88 | except NameError: # Reachable as 'unicode' is undefined in Python 3 | CODE |
| HIGH | …/ql/test/query-tests/Statements/unreachable/imports.py | 4 | except ImportError: | CODE |
| HIGH | …/query-tests/Variables/undefined/UninitializedLocal.py | 245 | except KeyError: | CODE |
| HIGH | …perimental/library-tests/CallGraph/code/class_super.py | 67 | except TypeError: | CODE |
| HIGH | …perimental/library-tests/CallGraph/code/class_super.py | 5 | except RuntimeError: | CODE |
| HIGH | python/ql/test/library-tests/dataflow/calls/test.py | 81 | except: | CODE |
| HIGH | python/ql/test/library-tests/dataflow/match/test.py | 137 | except KeyError: | CODE |
| 93 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/test/test_qlgen.py | 9 | CODE | |
| LOW | misc/codegen/test/test_trapgen.py | 5 | CODE | |
| LOW | misc/codegen/test/test_cppgen.py | 5 | CODE | |
| LOW | misc/codegen/test/test_ql.py | 5 | CODE | |
| LOW | misc/codegen/test/test_dbschemelaoder.py | 6 | CODE | |
| LOW | misc/codegen/test/test_dbscheme.py | 5 | CODE | |
| LOW | misc/codegen/test/test_schemaloader.py | 6 | CODE | |
| LOW | misc/codegen/test/test_render.py | 5 | CODE | |
| LOW | misc/codegen/test/test_dbschemegen.py | 6 | CODE | |
| LOW | misc/codegen/lib/ql.py | 18 | CODE | |
| LOW | misc/codegen/lib/dbscheme.py | 5 | CODE | |
| LOW | misc/codegen/lib/schema.py | 7 | CODE | |
| LOW | misc/codegen/lib/schema.py | 7 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/rusttestgen.py | 3 | CODE | |
| LOW | misc/codegen/generators/qlgen.py | 31 | CODE | |
| LOW | misc/codegen/generators/rustgen.py | 5 | CODE | |
| LOW | misc/codegen/generators/dbschemegen.py | 23 | CODE | |
| LOW | misc/codegen/loaders/schemaloader.py | 13 | CODE | |
| LOW | misc/scripts/patch_query_history.py | 14 | CODE | |
| LOW | misc/scripts/stageoverlap.py | 4 | CODE | |
| LOW | misc/scripts/models-as-data/convert_extensions.py | 5 | CODE | |
| LOW | misc/scripts/models-as-data/convert_extensions.py | 7 | CODE | |
| LOW | go/gen.py | 15 | CODE | |
| LOW | go/ql/integration-tests/root-internal-tests/test.py | 1 | CODE | |
| LOW | go/ql/integration-tests/traced-extraction/test.py | 1 | CODE | |
| LOW | go/ql/integration-tests/query-suite/test.py | 3 | CODE | |
| LOW | …nostics/build-constraints-exclude-all-go-files/test.py | 2 | CODE | |
| LOW | go/ql/integration-tests/test-extraction/test.py | 1 | CODE | |
| LOW | …ols/recorded-call-graph-metrics/src/cg_trace/tracer.py | 7 | CODE | |
| LOW | python/extractor/setup.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/buildtools/index.py | 14 | CODE | |
| LOW | …integration-test/python-2-deprecation/repo_dir/test.py | 3 | CODE | |
| LOW | …integration-test/python-2-deprecation/repo_dir/test.py | 5 | CODE | |
| LOW | …ration-test/disable-library-extraction/repo_dir/foo.py | 1 | CODE | |
| LOW | …actor/cli-integration-test/ignore-venv/repo_dir/foo.py | 1 | CODE | |
| LOW | …hon/extractor/tokenizer_generator/gen_state_machine.py | 25 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 5 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 6 | CODE | |
| LOW | python/extractor/lark/lark.py | 1 | CODE | |
| LOW | python/extractor/lark/__init__.py | 1 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 3 | CODE | |
| LOW | python/extractor/lark/__init__.py | 3 | CODE | |
| LOW | python/extractor/lark/__init__.py | 4 | CODE | |
| LOW | python/extractor/lark/__init__.py | 4 | CODE | |
| 705 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | python/extractor/lark/load_grammar.py | 459 | # ================= | COMMENT |
| MEDIUM | python/extractor/lark/load_grammar.py | 461 | # ================= | COMMENT |
| MEDIUM | python/extractor/lark/load_grammar.py | 475 | # ================= | COMMENT |
| MEDIUM | python/extractor/lark/load_grammar.py | 477 | # ================= | COMMENT |
| MEDIUM | …ry-tests/Security/CWE-326-WeakCryptoKey/weak_crypto.py | 79 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 1 | # ============================================================================== | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 3 | # ============================================================================== | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 24 | # ============================================================================== | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 26 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | …ental/library-tests/CallGraph/code/funky_regression.py | 18 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | …ental/library-tests/CallGraph/code/funky_regression.py | 20 | # ============================================================================== | COMMENT |
| MEDIUM | …erimental/library-tests/CallGraph/code/nested_class.py | 19 | # ============================================================================== | COMMENT |
| MEDIUM | …erimental/library-tests/CallGraph/code/nested_class.py | 45 | # ============================================================================== | COMMENT |
| MEDIUM | …tal/library-tests/CallGraph/code/class_construction.py | 67 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …ental/library-tests/CallGraph/code/runtime_decision.py | 29 | # ============================================================================== | COMMENT |
| MEDIUM | …imental/library-tests/CallGraph/code/class_subclass.py | 80 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …imental/library-tests/CallGraph/code/class_subclass.py | 82 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 4 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 6 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 53 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 55 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 91 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 93 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 125 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 127 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 81 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 83 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 110 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 124 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 126 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 156 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 158 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …on/ql/test/library-tests/dataflow/typetracking/test.py | 175 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …on/ql/test/library-tests/dataflow/typetracking/test.py | 177 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 199 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 201 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 70 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 72 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 81 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 83 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 142 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 144 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …library-tests/dataflow/typetracking/attribute_tests.py | 182 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …library-tests/dataflow/typetracking/attribute_tests.py | 184 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 181 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 183 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 207 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 209 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 552 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 554 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 556 | # -------------------------------------- | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 558 | # -------------------------------------- | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 605 | # -------------------------------------- | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 607 | # -------------------------------------- | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 40 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 42 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 240 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 242 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 323 | # -------------------------------------- | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 325 | # -------------------------------------- | COMMENT |
| 150 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/requirements_lock.txt | 1 | # | COMMENT |
| LOW | misc/bazel/internal/zipmerge/zipmerge.cpp | 21 | #include <stdbool.h> | COMMENT |
| LOW | misc/bazel/3rdparty/patch_defs.py | 1 | import sys | COMMENT |
| LOW | misc/scripts/create-change-note.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | go/extractor/extractor.go | 221 | } | COMMENT |
| LOW | go/extractor/extractor.go | 2161 | // func (*S[P]) m[Q ~P](x Q) {} | COMMENT |
| LOW | go/extractor/util/semver.go | 41 | func (ver semVer) String() string { | COMMENT |
| LOW | go/extractor/project/project.go | 461 | for _, component := range components { | COMMENT |
| LOW | go/extractor/autobuilder/build-environment.go | 221 | // We never return a version of Go that is outside of the supported range. | COMMENT |
| LOW | go/ql/test/query-tests/Security/CWE-798/jwt.go | 1 | package main | COMMENT |
| LOW | go/ql/test/query-tests/Security/CWE-643/tst.go | 1 | package main | COMMENT |
| LOW | go/ql/test/experimental/CWE-942/CorsMisconfiguration.go | 181 | // // OK-ish: the input origin header is validated against a whitelist. | COMMENT |
| LOW | …l/test/experimental/CWE-522-DecompressionBombs/test.go | 1 | package main | COMMENT |
| LOW | go/ql/test/library-tests/semmle/go/Types/cyclic.go | 21 | // type w struct { | COMMENT |
| LOW | …works/Revel/examples/booking/app/controllers/hotels.go | 1 | //go:generate swagger generate spec -o swagger.json | COMMENT |
| LOW | …works/Revel/examples/booking/app/controllers/hotels.go | 61 | // | COMMENT |
| LOW | …works/Revel/examples/booking/app/controllers/hotels.go | 81 | // - text/html | COMMENT |
| LOW | …/semmle/go/frameworks/Twirp/rpc/notes/service.twirp.go | 801 | } | COMMENT |
| LOW | …/semmle/go/frameworks/Twirp/rpc/notes/service.twirp.go | 821 | // service. Those accessors are a low-level API for building reflection tools. | COMMENT |
| LOW | …-tests/semmle/go/frameworks/StdlibTaintFlow/Strings.go | 641 | // sink(51, out) | COMMENT |
| LOW | go/ql/integration-tests/dep-sample/work/Gopkg.toml | 1 | # Gopkg.toml example | COMMENT |
| LOW | …tion-tests/diagnostics/no-go-files-found/work/test.txt | 1 | // The "Go files were found but not processed" diagnostic should not be emitted because there are no go files | COMMENT |
| LOW | go/ql/lib/ext/mime.multipart.model.yml | 1 | extensions: | COMMENT |
| LOW | …l-graph-metrics/src/cg_trace/bytecode_reconstructor.py | 201 | obj_expr = expr_that_added_elem_to_stack(instructions, index - 1, 0) | COMMENT |
| LOW | python/extractor/tsg-python/tsp/bindings/rust/lib.rs | 1 | // -*- coding: utf-8 -*- | COMMENT |
| LOW | python/extractor/tsg-python/tsp/bindings/rust/lib.rs | 21 | //! let parsed = parser.parse(code, None); | COMMENT |
| LOW | …thon/extractor/tsg-python/tsp/src/tree_sitter/parser.h | 1 | #ifndef TREE_SITTER_PARSER_H_ | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 1 | #ifndef TREE_SITTER_ARRAY_H_ | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 141 | (other)->contents = _array_swap_tmp; \ | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 161 | /// of a given struct field (specified with a leading dot) to determine the order. | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 321 | #pragma warning(pop) | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/alloc.h | 21 | #define ts_malloc ts_current_malloc | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/alloc.h | 41 | #ifndef ts_realloc | COMMENT |
| LOW | python/extractor/buildtools/index.py | 221 | # `site-packages` as a subfolder. | COMMENT |
| LOW | python/extractor/buildtools/index.py | 341 | options += exclude_venvs_options() | COMMENT |
| LOW | python/extractor/buildtools/index.py | 361 | COMMENT | |
| LOW | python/extractor/lark/lark.py | 221 | def parse(self, text): | COMMENT |
| LOW | python/extractor/lark/parsers/xearley.py | 1 | "This module implements an experimental Earley Parser with a dynamic lexer" | COMMENT |
| LOW | python/extractor/lark/parsers/earley.py | 1 | "This module implements an Earley Parser" | COMMENT |
| LOW | python/extractor/lark/tools/standalone.py | 1 | # This file used to contain the Lark standalone tool. | COMMENT |
| LOW | python/extractor/tests/test_parser.py | 61 | pyfile = os.path.join(self.test_folder, filename) | COMMENT |
| LOW | python/extractor/tests/tokenizer/utf8.py | 1 | # Some abitrary prefix with no space beforecoding: utf-8 -*- | COMMENT |
| LOW | python/extractor/tests/parser/just_comments.py | 1 | # This is a comment | COMMENT |
| LOW | python/extractor/semmle/populator.py | 61 | # This is not the prettiest way to do it, but when running tests we want to ensure that the | COMMENT |
| LOW | python/extractor/semmle/python/passes/labeller.py | 81 | if isinstance(outer.scope, ast.Class): | COMMENT |
| LOW | python/extractor/semmle/python/parser/tsg_parser.py | 481 | # Otherwise, we first have to get the flattened list of all of the strings and/or | COMMENT |
| LOW | python/extractor/semmle/python/parser/tokenizer.py | 261 | #8 = CharacterClass 8 ['#'] | COMMENT |
| LOW | python/extractor/semmle/python/parser/tokenizer.py | 281 | #28 = CharacterClass 28 ['>'] | COMMENT |
| LOW | python/extractor/semmle/python/parser/ast.py | 381 | # | COMMENT |
| LOW | python/extractor/blib2to3/Grammar.txt | 21 | COMMENT | |
| LOW | python/extractor/blib2to3/Grammar.txt | 41 | [',' ['**' tname [',']]] | '**' tname [',']) | COMMENT |
| LOW | python/extractor/blib2to3/Grammar.txt | 201 | # This was an issue because the parser would not follow the correct derivation | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 21 | #class CommentedOut: | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 41 | # '''Doc string | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 61 | # """ | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 81 | # call() | COMMENT |
| LOW | …s/Security/CWE-113-HeaderInjection/Tests1/http_test.py | 21 | # httpd = HTTPServer(("127.0.0.1", 8080), VulnerableHandler) | COMMENT |
| LOW | …on/ql/test/query-tests/Security/CWE-730-ReDoS/redos.py | 1 | import re | COMMENT |
| LOW | …l/test/query-tests/Security/CWE-730-ReDoS/KnownCVEs.py | 41 | COMMENT | |
| LOW | …y-tests/Security/CWE-089-SqlInjection/sql_injection.py | 21 | cursor.execute("SELECT * FROM users WHERE username = '%s'" % username) # $ Alert | COMMENT |
| 545 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/pytest/lib/query_suites.py | 17 | def check_queries_not_included(codeql, cwd, expected_files, semmle_code_dir): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 90 | def generate_children_implementations(generate): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 99 | def _filter_generated_classes(ret, output_test_files=False): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 199 | def test_to_string_impl_from_primary_class(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 240 | def test_to_string_impl_from_primary_class_is_not_generated_when_custom(): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 252 | def test_one_empty_internal_class(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 331 | def test_internal_not_in_import_list(generate_import_list): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 738 | def test_repeated_unordered_property(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 778 | def test_repeated_optional_property(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 847 | def test_single_class_property(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 937 | def test_root_element_cannot_have_children(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1005 | def test_format_no_codeql_in_path(opts, generate, render_manager, run_mock): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1042 | def test_modified_stub_skipped(qlgen_opts, generate, render_manager): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1073 | def test_test_source_present_with_dir(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1084 | def test_test_total_properties(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1114 | def test_test_partial_properties(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1152 | def test_test_properties_deduplicated(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1181 | def test_test_properties_skipped(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1211 | def test_test_base_class_skipped(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1231 | def test_test_final_class_skipped(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1252 | def test_test_class_hierarchy_collapse(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1279 | def test_test_class_hierarchy_uncollapse(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1308 | def test_test_class_hierarchy_uncollapse_at_final(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1346 | def test_property_description(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1380 | def test_property_doc_override(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1409 | def test_repeated_property_doc_override(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1455 | def test_property_doc_abbreviations(generate_classes, abbr, expected): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1486 | def test_property_doc_abbreviations_ignored_if_within_word( | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1519 | def test_repeated_property_doc_override_with_format(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1568 | def test_repeated_property_doc_override_with_multiple_formats(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1613 | def test_property_doc_override_with_format(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1645 | def test_property_on_class_with_default_doc_name(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1676 | def test_stub_on_class_with_synth_from_class(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1715 | def test_stub_on_class_with_synth_on_arguments(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1864 | def test_property_with_custom_db_table_name(generate_classes): | CODE |
| LOW | misc/codegen/test/test_cpp.py | 68 | def test_trap_has_first_field_marked(): | CODE |
| LOW | misc/codegen/test/test_cpp.py | 80 | def test_tag_has_first_base_marked(): | CODE |
| LOW | misc/codegen/test/test_cpp.py | 95 | def test_class_has_first_base_marked(): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 72 | def test_one_empty_table_rejected(generate_traps): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 118 | def test_one_table_with_two_binding_first_is_id(generate_traps): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 150 | def test_one_table_special_types(generate_traps, column, field): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 164 | def test_one_table_overridden_unsigned_field(generate_traps, name): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 174 | def test_one_table_overridden_underscore_named_field(generate_traps): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 109 | def test_class_field_with_null(generate, input): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 139 | def test_class_with_predicate(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 168 | def test_class_with_overridden_unsigned_field(generate, name): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 185 | def test_class_with_overridden_underscore_field(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 203 | def test_class_with_keyword_field(generate, name): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 261 | def test_synth_classes_ignored(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 287 | def test_synth_properties_ignored(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 316 | def test_properties_with_custom_db_table_names(generate): | CODE |
| LOW | misc/codegen/test/test_ql.py | 8 | def test_property_has_first_table_param_marked(): | CODE |
| LOW | misc/codegen/test/test_ql.py | 26 | def test_property_indefinite_article(name, expected_getter): | CODE |
| LOW | misc/codegen/test/test_ql.py | 32 | def test_property_unordered_getter(name, expected_getter): | CODE |
| LOW | misc/codegen/test/test_ql.py | 45 | def test_property_is_repeated(plural, expected): | CODE |
| LOW⚡ | misc/codegen/test/test_ql.py | 89 | def test_property_no_plural_no_indefinite_getter(): | CODE |
| LOW⚡ | misc/codegen/test/test_ql.py | 99 | def test_property_predicate_getter(): | CODE |
| LOW⚡ | misc/codegen/test/test_ql.py | 104 | def test_class_processes_bases(): | CODE |
| LOW | misc/codegen/test/test_ql.py | 116 | def test_class_has_first_property_marked(): | CODE |
| LOW | misc/codegen/test/test_ql.py | 160 | def test_synth_accessor_has_first_constructor_param_marked(): | CODE |
| 545 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | python/extractor/semmle/graph.py | 0 | a simple directed graph class (not necessarily a dag). nodes must be hashable | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | a simple directed graph class (not necessarily a dag). nodes must be hashable | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | a simple directed graph class (not necessarily a dag). nodes must be hashable | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | add an edge (x -> y) to the graph. return true if x, y was previously in graph | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | add an edge (x -> y) to the graph. return true if x, y was previously in graph | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | add an edge (x -> y) to the graph. return true if x, y was previously in graph | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator for all nodes, in the form (node, note) pairs. do not modify the graph while using this iterator | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator for all nodes, in the form (node, note) pairs. do not modify the graph while using this iterator | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator for all nodes, in the form (node, note) pairs. do not modify the graph while using this iterator | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator for all edges, in the form of (pred, succ, note) triple. do not modify the graph while using this ite | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator for all edges, in the form of (pred, succ, note) triple. do not modify the graph while using this ite | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator for all edges, in the form of (pred, succ, note) triple. do not modify the graph while using this ite | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator for all nodes with no predecessors. do not modify the graph while using this iterator | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator for all nodes with no predecessors. do not modify the graph while using this iterator | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator for all nodes with no predecessors. do not modify the graph while using this iterator | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | a digraph that supports the concept of definitions and variables. used to compute dominance and ssa form. for more expla | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | a digraph that supports the concept of definitions and variables. used to compute dominance and ssa form. for more expla | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | a digraph that supports the concept of definitions and variables. used to compute dominance and ssa form. for more expla | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | ensures that 'what' has been computed (computing if needed). | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | ensures that 'what' has been computed (computing if needed). | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | ensures that 'what' has been computed (computing if needed). | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns an iterable of node pairs: node, idom(node) | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns an iterable of node pairs: node, idom(node) | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns an iterable of node pairs: node, idom(node) | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute the dominance frontier: df[n] = df_local[n] union over c in children df_up[c] | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute the dominance frontier: df[n] = df_local[n] union over c in children df_up[c] | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute the dominance frontier: df[n] = df_local[n] union over c in children df_up[c] | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute the phi nodes for this graph. a minimal set of phi-nodes are computed; no phi-nodes are added unless the variabl | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute the phi nodes for this graph. a minimal set of phi-nodes are computed; no phi-nodes are added unless the variabl | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute the phi nodes for this graph. a minimal set of phi-nodes are computed; no phi-nodes are added unless the variabl | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute the ssa variables, definitions, uses and phi-inputs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute the ssa variables, definitions, uses and phi-inputs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute the ssa variables, definitions, uses and phi-inputs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | ensure that there is no more than one ssa variable for each (variable, node) pair. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | ensure that there is no more than one ssa variable for each (variable, node) pair. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | ensure that there is no more than one ssa variable for each (variable, node) pair. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns all the ssa definition as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns all the ssa definition as an iterator of (node, variable) pairs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns all the ssa definition as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns the definition node of var. returns none if there is no definition. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns the definition node of var. returns none if there is no definition. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns the definition node of var. returns none if there is no definition. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns all the ssa uses as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns all the ssa uses as an iterator of (node, variable) pairs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns all the ssa uses as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return all ssa phi inputs as an iterator of (variable, input-variable) pairs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return all ssa phi inputs as an iterator of (variable, input-variable) pairs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return all ssa phi inputs as an iterator of (variable, input-variable) pairs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute all flow nodes that are the first node in a basic block. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute all flow nodes that are the first node in a basic block. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute all flow nodes that are the first node in a basic block. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator over all node in basic block 'bb. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator over all node in basic block 'bb. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator over all node in basic block 'bb. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute which variables have been defined. a variable is defined at node n, if there is a path to n which passes through | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute which variables have been defined. a variable is defined at node n, if there is a path to n which passes through | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute which variables have been defined. a variable is defined at node n, if there is a path to n which passes through | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute liveness of all variables in this flow-graph. return a mapping of basic blocks to the set of variables that are | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute liveness of all variables in this flow-graph. return a mapping of basic blocks to the set of variables that are | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute liveness of all variables in this flow-graph. return a mapping of basic blocks to the set of variables that are | STRING |
| 19 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ibrary-tests/frameworks/django-v2-v3/FileField_test.py | 23 | upload_2 = django.db.models.fields.files.FileField(upload_to=custom_path_function_2) | CODE |
| CRITICAL | …ts/frameworks/django-orm/testapp/orm_security_tests.py | 84 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | …s/v_1_8_0/getJvmModuleNameForDeserializedDescriptor.kt | 7 | return org.jetbrains.kotlin.load.kotlin.getJvmModuleNameForDeserializedDescriptor(descriptor) | CODE |
| CRITICAL | …mmle/tests/TempDirLocalInformationDisclosure/Test.java | 97 | File tempDir = com.google.common.io.Files.createTempDir(); // $ Alert | CODE |
| CRITICAL⚡ | …CleartextStorageCookie/CleartextStorageCookieTest.java | 29 | new io.netty.handler.codec.http.DefaultCookie("name", name); | CODE |
| CRITICAL⚡ | …CleartextStorageCookie/CleartextStorageCookieTest.java | 33 | new io.netty.handler.codec.http.DefaultCookie("password", password); | CODE |
| CRITICAL⚡ | …CleartextStorageCookie/CleartextStorageCookieTest.java | 37 | new io.netty.handler.codec.http.cookie.DefaultCookie("password", encrypt(password)); | CODE |
| CRITICAL | …uery-tests/security/CWE-330/InsecureRandomCookies.java | 25 | new io.netty.handler.codec.http.DefaultCookie("name", Integer.toString(c)); // $ Alert | CODE |
| CRITICAL | …uery-tests/security/CWE-330/InsecureRandomCookies.java | 28 | new io.netty.handler.codec.http.cookie.DefaultCookie("name", Integer.toString(c)); // $ Alert | CODE |
| CRITICAL | …s/security/CWE-798/semmle/tests/HardcodedShiroKey.java | 26 | cookieRememberMeManager.setCipherKey(org.apache.shiro.codec.Base64.decode("6ZmI6I2j5Y+R5aSn5ZOlAA==")); // $ Har | CODE |
| CRITICAL | java/ql/lib/CHANGELOG.md | 1248 | * Added flow summary for `org.springframework.data.repository.CrudRepository.save()`. | COMMENT |
| CRITICAL | java/ql/lib/change-notes/released/0.4.0.md | 33 | * Added flow summary for `org.springframework.data.repository.CrudRepository.save()`. | COMMENT |
| CRITICAL | …tal/Security/CWE/CWE-078/JSchOSInjectionSanitized.java | 6 | if (!com.google.common.net.InetAddresses.isInetAddress(untrusted)) { | CODE |
| CRITICAL | …l/src/Security/CWE/CWE-200/TempDirUsageVulnerable.java | 12 | File tempDir = com.google.common.io.Files.createTempDir(); // BAD: CVE-2020-8908: Directory has permissions `drw | CODE |
| CRITICAL | …builder/Semmle.Autobuild.CSharp/StandaloneBuildRule.cs | 15 | : BuildScript.Create(_ => Semmle.Extraction.CSharp.Standalone.Program.Main([])); | CODE |
| CRITICAL | …rosoft/aspnetcore/blazor/Components_MyInput_razor.g.cs | 80 | __builder.AddAttribute(2, "onchange", global::Microsoft.AspNetCore.Components.EventCallback.Factory.CreateBi | CODE |
| CRITICAL | …rosoft/aspnetcore/blazor/Components_MyInput_razor.g.cs | 82 | Param1 = __value; return global::Microsoft.AspNetCore.Components.CompilerServices.RuntimeHelpers.InvokeA | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 215 | __builder.AddComponentParameter(42, nameof(global::Microsoft.AspNetCore.Components.Forms.InputText.ValueChan | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 255 | __builder.AddAttribute(57, "onchange", global::Microsoft.AspNetCore.Components.EventCallback.Factory.CreateB | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 295 | __builder.AddAttribute(71, "onchange", global::Microsoft.AspNetCore.Components.EventCallback.Factory.CreateB | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 402 | __builder.AddComponentParameter(99, nameof(global::BlazorTest.Components.MyInput.Param1Changed), global::Mic | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 448 | __builder.AddComponentParameter(113, nameof(global::BlazorTest.Components.MyInput.Param1Changed), global::Mi | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 488 | __builder.AddComponentParameter(122, nameof(global::Microsoft.AspNetCore.Components.Forms.InputText.ValueCha | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 219 | testlib.typevar.a.b.c.mySink(source()); // OK - does not match sub path | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 225 | testlib.typevar.left.x.right.mySink(source()); // NOT OK | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 226 | testlib.typevar.left.left.x.right.right.mySink(source()); // NOT OK | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 227 | testlib.typevar.left.x.right.right.mySink(source()); // OK - mismatched left and right | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 228 | testlib.typevar.left.left.x.right.mySink(source()); // OK - mismatched left and right | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 233 | testlib.typevar.left.x.right.getThis().getThis().mySink(source()); // NOT OK | CODE |
| CRITICAL | …/ql/test/library-tests/dataflow/summaries/summaries.rb | 37 | Bar.new.next.next.next.next.method(tainted) # $ hasValueFlow=tainted | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | misc/scripts/generate-code-scanning-query-list.py | 132 | except Exception as e: | CODE |
| MEDIUM⚡ | misc/scripts/generate-code-scanning-query-list.py | 133 | print("Error: couldn't invoke 'git'. Is it on the path? Aborting.", file=sys.stderr) | CODE |
| LOW⚡ | misc/scripts/generate-code-scanning-query-list.py | 139 | except Exception as e: | CODE |
| MEDIUM⚡ | misc/scripts/generate-code-scanning-query-list.py | 140 | print("Error: couldn't invoke CodeQL CLI 'codeql'. Is it on the path? Aborting.", file=sys.stderr) | CODE |
| LOW | misc/scripts/generate-code-scanning-query-list.py | 173 | except Exception as e: | CODE |
| LOW | misc/scripts/models-as-data/bulk_generate_mad.py | 141 | except Exception as e: | CODE |
| LOW | misc/scripts/library-coverage/generate-report.py | 87 | except Exception as e: | CODE |
| MEDIUM | misc/scripts/library-coverage/generate-report.py | 88 | print("Error: couldn't invoke CodeQL CLI 'codeql'. Is it on the path? Aborting.", file=sys.stderr) | CODE |
| LOW | misc/scripts/library-coverage/comment-pr.py | 63 | except Exception as e: | CODE |
| LOW | misc/scripts/library-coverage/comment-pr.py | 90 | except Exception: | CODE |
| LOW | …ols/recorded-call-graph-metrics/src/cg_trace/tracer.py | 267 | except Exception: | CODE |
| LOW | python/extractor/python_tracer.py | 29 | except Exception: | CODE |
| MEDIUM | python/extractor/python_tracer.py | 18 | def load_library(): | CODE |
| LOW | python/extractor/buildtools/version.py | 51 | except Exception: | CODE |
| LOW | python/extractor/buildtools/version.py | 116 | except Exception: | CODE |
| LOW | python/extractor/buildtools/version.py | 144 | except Exception: | CODE |
| LOW | python/extractor/buildtools/version.py | 205 | except Exception: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 68 | except Exception as ex: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 73 | except Exception: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 97 | except Exception as ex1: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 100 | except Exception as ex2: | CODE |
| MEDIUM | python/extractor/buildtools/auto_install.py | 65 | def try_install_with_deps(req, venv): | CODE |
| MEDIUM | python/extractor/buildtools/install.py | 69 | print('Error trying to run get_venv_lib (this is Python {})'.format(sys.version[:5])) | CODE |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 168 | except Exception as ex: | CODE |
| LOW | python/extractor/tests/test_tokenizer.py | 45 | except Exception as ex: | CODE |
| LOW | python/extractor/tests/tokenizer/basic.py | 32 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/worker.py | 219 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/worker.py | 301 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 346 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 350 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 356 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 365 | except Exception as ex: | CODE |
| MEDIUM | python/extractor/semmle/worker.py | 166 | def receive(self, block=False): | CODE |
| MEDIUM | python/extractor/semmle/worker.py | 235 | def _drain_queue(queue): | CODE |
| LOW | python/extractor/semmle/logging.py | 122 | except Exception: | CODE |
| LOW | python/extractor/semmle/logging.py | 147 | except Exception: | CODE |
| LOW | python/extractor/semmle/logging.py | 211 | except Exception: | CODE |
| LOW | python/extractor/semmle/util.py | 378 | except Exception as ex: | CODE |
| MEDIUM | python/extractor/semmle/cache.py | 80 | def _list_files(self): | CODE |
| MEDIUM | python/extractor/semmle/cache.py | 109 | def clear(self): | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 99 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 105 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 112 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 118 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 123 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 44 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 58 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 71 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 83 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 146 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 166 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/cache.py | 171 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 183 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/cache.py | 187 | except Exception: | CODE |
| LOW | python/extractor/semmle/profiling.py | 53 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/populator.py | 103 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/python/finder.py | 241 | except Exception: | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 89 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 126 | except Exception: | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 198 | except Exception as ex: | CODE |
| 109 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/codegen.py | 21 | CODE | |
| LOW | misc/codegen/test/test_qlgen.py | 99 | CODE | |
| LOW | misc/codegen/lib/schemadefs.py | 327 | CODE | |
| LOW | misc/codegen/lib/schemadefs.py | 342 | CODE | |
| LOW | misc/codegen/lib/render.py | 157 | CODE | |
| LOW | misc/codegen/lib/render.py | 173 | CODE | |
| LOW | misc/codegen/lib/render.py | 211 | CODE | |
| LOW | misc/codegen/generators/trapgen.py | 71 | CODE | |
| LOW | misc/codegen/generators/rusttestgen.py | 53 | CODE | |
| LOW | misc/codegen/generators/qlgen.py | 487 | CODE | |
| LOW | misc/codegen/generators/qlgen.py | 137 | CODE | |
| LOW | misc/codegen/generators/dbschemegen.py | 46 | CODE | |
| LOW | misc/bazel/internal/install.py | 66 | CODE | |
| LOW | misc/scripts/calculate_mrva_totals.py | 63 | CODE | |
| LOW | misc/scripts/accept-expected-changes-from-ci.py | 93 | CODE | |
| LOW | misc/scripts/accept-expected-changes-from-ci.py | 229 | CODE | |
| LOW | misc/scripts/library-coverage/generate-report.py | 33 | CODE | |
| LOW | …l-graph-metrics/src/cg_trace/bytecode_reconstructor.py | 185 | CODE | |
| LOW | …s/recorded-call-graph-metrics/src/cg_trace/exporter.py | 7 | CODE | |
| LOW | python/extractor/imp.py | 225 | CODE | |
| LOW | python/extractor/buildtools/version.py | 155 | CODE | |
| LOW | python/extractor/buildtools/semmle/requirements.py | 108 | CODE | |
| LOW | python/extractor/buildtools/semmle/requirements.py | 123 | CODE | |
| LOW | python/extractor/tokenizer_generator/machine.py | 123 | CODE | |
| LOW | python/extractor/tokenizer_generator/machine.py | 307 | CODE | |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 138 | CODE | |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 24 | CODE | |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 87 | CODE | |
| LOW | …hon/extractor/tokenizer_generator/gen_state_machine.py | 93 | CODE | |
| LOW | python/extractor/lark/parser_frontends.py | 160 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 336 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 525 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 183 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 290 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 589 | CODE | |
| LOW | python/extractor/lark/visitors.py | 22 | CODE | |
| LOW | python/extractor/lark/lark.py | 103 | CODE | |
| LOW | python/extractor/lark/utils.py | 59 | CODE | |
| LOW | python/extractor/lark/lexer.py | 124 | CODE | |
| LOW | python/extractor/lark/lexer.py | 74 | CODE | |
| LOW | python/extractor/lark/exceptions.py | 26 | CODE | |
| LOW | python/extractor/lark/reconstruct.py | 26 | CODE | |
| LOW | python/extractor/lark/parse_tree_builder.py | 27 | CODE | |
| LOW | python/extractor/lark/parsers/lalr_parser.py | 32 | CODE | |
| LOW | python/extractor/lark/parsers/cyk.py | 136 | CODE | |
| LOW | python/extractor/lark/parsers/xearley.py | 51 | CODE | |
| LOW | python/extractor/lark/parsers/xearley.py | 84 | CODE | |
| LOW | python/extractor/lark/parsers/lalr_analysis.py | 57 | CODE | |
| LOW | python/extractor/lark/parsers/lalr_analysis.py | 61 | CODE | |
| LOW | python/extractor/lark/parsers/grammar_analysis.py | 47 | CODE | |
| LOW | python/extractor/lark/parsers/earley.py | 98 | CODE | |
| LOW | python/extractor/lark/tools/nearley.py | 105 | CODE | |
| LOW | python/extractor/tests/test_parser.py | 99 | CODE | |
| LOW | python/extractor/semmle/query_gen.py | 116 | CODE | |
| LOW | python/extractor/semmle/worker.py | 288 | CODE | |
| LOW | python/extractor/semmle/worker.py | 166 | CODE | |
| LOW | python/extractor/semmle/worker.py | 202 | CODE | |
| LOW | python/extractor/semmle/logging.py | 162 | CODE | |
| LOW | python/extractor/semmle/logging.py | 200 | CODE | |
| LOW | python/extractor/semmle/util.py | 367 | CODE | |
| 84 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | misc/codegen/test/test_schemaloader.py | 815 | assert data.null_class is data.classes[data.null] | CODE |
| HIGH | misc/codegen/lib/schema.py | 167 | return self.classes[self.null] if self.null else None | CODE |
| HIGH | misc/codegen/generators/dbschemegen.py | 164 | Union(dbtype(t, data.null), [dbtype(t), dbtype(data.null)]) | CODE |
| HIGH | misc/codegen/loaders/schemaloader.py | 187 | f"Null class {null} already defined, second null class {name} not allowed" | CODE |
| HIGH | misc/codegen/loaders/schemaloader.py | 198 | null=null, | CODE |
| HIGH | misc/bazel/internal/git_lfs_probe.py | 221 | git lfs fetch && git lfs checkout | CODE |
| HIGH | misc/bazel/internal/git_lfs_probe.py | 223 | git lfs fetch && git lfs checkout""", file=sys.stderr) | CODE |
| HIGH | python/extractor/semmle/python/passes/exports.py | 103 | in the __all__ list or, if __all__ is undefined, is defined at top-level | STRING |
| HIGH | python/extractor/semmle/python/passes/flow.py | 1890 | '''If SSA_Var node is undefined, then FlowGraph inserts a None - | STRING |
| HIGH | python/extractor/blib2to3/pgen2/parse.py | 147 | self.push(t, self.grammar.dfas[t], newstate, context) | CODE |
| HIGH | …Security/CWE-078-CommandInjection/command_injection.py | 69 | using the filename `not-there || echo pwned`. | STRING |
| HIGH | …/query-tests/Variables/undefined/UninitializedLocal.py | 183 | if not var or other: #other looks like it might be undefined, but it is defined. | CODE |
| HIGH | python/ql/test/library-tests/PointsTo/absent/absent.py | 26 | @deco(undefined) | CODE |
| HIGH⚡ | …on/ql/test/library-tests/ControlFlow/splitting/test.py | 243 | if not var or other.attr: #other looks like it might be undefined, but it is defined. | CODE |
| HIGH | rust/schema/annotations.py | 521 | x && y; | STRING |
| HIGH | rust/schema/annotations.py | 1621 | type NonNull = builtin#pattern_type(*const () is !null); | STRING |
| HIGH | …rc/utils/flowtestcasegenerator/GenerateFlowTestCase.py | 166 | testJava.write("\t%s obj%d = null;\n" % (outerName, i)) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | misc/scripts/create-change-note.py | 145 | # Create the change note file | COMMENT |
| MEDIUM | misc/scripts/shared-code-metrics.py | 111 | # Create a list of assets | COMMENT |
| MEDIUM | misc/scripts/shared-code-metrics.py | 185 | # Create a big index of all files and their line counts. | COMMENT |
| MEDIUM | misc/scripts/models-as-data/convert_extensions.py | 95 | # Create a file for each namespace and save models. | COMMENT |
| MEDIUM | misc/scripts/models-as-data/generate_mad.py | 238 | # Create a file for each namespace and save models. | COMMENT |
| MEDIUM | python/extractor/imp.py | 1 | """This module provides the components needed to build your own __import__ | STRING |
| MEDIUM | …tion-test/writing-diagnostics/repo_dir/syntaxerror1.py | 1 | # This file contains a deliberate syntax error | COMMENT |
| MEDIUM | …hon/extractor/tokenizer_generator/gen_state_machine.py | 194 | print("# This file is AUTO-GENERATED. DO NOT MODIFY") | STRING |
| MEDIUM | python/extractor/lark/parsers/lalr_parser.py | 1 | """This module implements a LALR(1) Parser | STRING |
| MEDIUM | python/extractor/lark/parsers/cyk.py | 1 | """This module implements a CYK parser.""" | STRING |
| MEDIUM | python/extractor/semmle/python/extractor.py | 71 | #Create an AST equivalent to an empty file, so that the other passes produce consistent output. | COMMENT |
| MEDIUM | python/extractor/semmle/python/passes/objects.py | 323 | #Create an object for 'exec', as parser no longer treats it as statement. | COMMENT |
| MEDIUM | python/extractor/semmle/python/parser/tokenizer.py | 1 | # This file is AUTO-GENERATED. DO NOT MODIFY | COMMENT |
| MEDIUM | …l/query-tests/Security/CWE-079/smtplib_bad_subparts.py | 18 | # Create the plain-text and HTML version of your message | COMMENT |
| MEDIUM | …query-tests/Security/CWE-079/smtplib_bad_via_attach.py | 21 | # Create the plain-text and HTML version of your message | COMMENT |
| MEDIUM | python/ql/test/experimental/attrs/test.py | 1 | # This file is a simple test of which nodes are included with AttrRead/AttrWrite. | COMMENT |
| MEDIUM | …rary-tests/PointsTo/new/code/v_pointsto_regressions.py | 1 | # This file contains snippets from snapshots that displayed interesting results for `ImpliesDataflow.ql`. | COMMENT |
| MEDIUM | python/ql/test/library-tests/regexparser/locations.py | 3 | # This file contains tests for the regexp parser's location tracking. | COMMENT |
| MEDIUM | …eworks/serverless/aws_lambda/function/extra_lambdas.py | 9 | # This function is not mentioned in template.yml | COMMENT |
| MEDIUM | …t/library-tests/frameworks/django-v2-v3/taint_forms.py | 45 | # This method is supposed to clean the `foo` field in context of this form. | COMMENT |
| MEDIUM | …thon/ql/lib/semmle/python/frameworks/Asyncpg.model.yml | 27 | # Creating an internal `~Connection` type that contains both `Connection` and `ConnectionPool`. | COMMENT |
| MEDIUM | config/sync-files.py | 150 | # This function is invoked directly by a CI script, which passes a different error-handling | COMMENT |
| MEDIUM | …tegration-tests/update-ferstl-depgraph-dependencies.sh | 138 | # Create a minimal stub project with no dependencies. Using an empty project | COMMENT |
| MEDIUM | docs/codeql/query-help/conf.py | 5 | # This file is execfile()d with the current directory set to its | COMMENT |
| MEDIUM | docs/codeql/ql-training/conf.py | 5 | # This file is execfile()d with the current directory set to its | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | go/ql/test/query-tests/Security/CWE-640/main.go | 168 | var email = "test@test.com" | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 12 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 15 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 23 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 26 | doReturn(0).when(employeeRecordMock).get("John Doe"); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 35 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 38 | when(employeeRecordMock.get("John Doe")).thenReturn(sampleEmployee); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 39 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 48 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 51 | doReturn(0).when(employeeRecordMock).get("John Doe"); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 52 | doReturn(0).when(employeeRecordMock).update(sampleEmployee, "Jane Doe"); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 146 | compliantStrings.add("lorem ipsum dolor "+"sit amet"); // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 147 | compliantStrings.add("lorem ipsum dolor " + "sit amet"); // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 148 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 148 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 150 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 150 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 155 | lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 155 | lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 172 | nonCompliantStrings.add("loremipsum dolor sit amet,consectetur adipiscing elit, " + // NON_COMPLIANT | STRING |
| LOW | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 175 | loremipsum dolor sit amet,consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | …t/library-tests/dataflow/taint/StringBuilderTests.java | 55 | sb.append("from preferences select locale where user='placeholder'"); | CODE |
| LOW | … Practice/Undesirable Calls/CallsToStringToString.java | 2 | String name = "John Doe"; | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 27 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 30 | when(employeeRecordMock.get("John Doe")).thenReturn(sampleEmployee); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 31 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 37 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 40 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW | …ations of Best Practice/DontUseConstructorArgIndex.xml | 4 | <constructor-arg index="0" value="John Doe"/> | CODE |
| LOW | …ations of Best Practice/DontUseConstructorArgIndex.xml | 12 | <constructor-arg type="java.lang.String" value="Jane Doe"/> | CODE |
| LOW | …rc/Likely Bugs/Cloning/MissingCallToSuperCloneBad.java | 23 | WrongEmployee e = new WrongEmployee("John Doe"); | CODE |
| LOW | …c/Likely Bugs/Cloning/MissingCallToSuperCloneGood.java | 26 | Employee e2 = new Employee("Jane Doe"); | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 23 | slug: ["placeholder"] | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 24 | ref: ["placeholder"] | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 29 | - slug: "placeholder" | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 30 | ref: "placeholder" | CODE |
| LOW | …/Security Features/CWE-798/TestHardcodedCredentials.cs | 28 | email: "foo@bar.com", | CODE |
| LOW | …/Security Features/CWE-798/TestHardcodedCredentials.cs | 45 | email: "foo@bar.com", | CODE |
| LOW | …ests/Security Features/CWE-798/HardcodedCredentials.cs | 34 | email: "foo@bar.com", | CODE |
| LOW | javascript/extractor/tests/ui5/input/test.view.json | 7 | "placeholder": "Enter Payload", | CODE |
| LOW | …tests/Security/CWE-918/axiosInterceptors.serverSide.js | 21 | axios.get("placeholder"); | CODE |
| LOW | …/test/library-tests/StringConcatenation/html-concat.js | 10 | <i>Lorem ipsum!</i>`; | CODE |
| LOW | …ry-tests/frameworks/active_resource/active_resource.rb | 9 | alice.address = "123 Main Street" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/extractor/semmle/traverser.py | 18 | __all__ = [ 'Traverser' ] | CODE |
| LOW | python/extractor/semmle/profiling.py | 7 | __all__ = [ 'get_profiler' ] | CODE |
| LOW | python/extractor/semmle/python/AstMeta.py | 9 | __all__ = [ 'order' ] | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 20 | __all__ = [ 'Extractor', 'CachingExtractor' ] | CODE |
| LOW | python/extractor/semmle/python/imports.py | 15 | __all__ = [ 'CachingModuleImporter', 'ModuleImporter', 'importer_from_options' ] | CODE |
| LOW | python/extractor/semmle/python/modules.py | 15 | __all__ = [ 'PythonSourceModule' ] | CODE |
| LOW | python/extractor/semmle/python/passes/ast_pass.py | 8 | __all__ = [ 'ASTPass' ] | CODE |
| LOW | python/extractor/semmle/python/passes/labeller.py | 8 | __all__ = [ 'Labeller' ] | CODE |
| LOW | python/extractor/semmle/python/passes/flow.py | 17 | __all__ = [ 'FlowPass' ] | CODE |
| LOW | python/extractor/semmle/python/passes/lexical.py | 9 | __all__ = [ 'LexicalPass' ] | CODE |
| LOW | python/extractor/semmle/python/passes/pruner.py | 22 | __all__ = [ 'do_pruning' ] | CODE |
| LOW | python/extractor/semmle/python/passes/objects.py | 28 | __all__ = [ 'ObjectPass' ] | CODE |
| LOW | python/extractor/blib2to3/pgen2/driver.py | 16 | __all__ = ["load_grammar"] | CODE |
| LOW | python/extractor/blib2to3/pgen2/tokenize.py | 38 | __all__ = [x for x in dir(token) if x[0] != '_'] + ["tokenize", | CODE |
| LOW | python/ql/test/query-tests/Imports/general/module.py | 4 | __all__ = [] | CODE |
| LOW | …l/test/query-tests/Variables/general/variables_test.py | 2 | __all__ = [ 'is_used_var1' ] | CODE |
| LOW | python/ql/test/query-tests/Variables/unused/test.py | 92 | __all__ = [ 'hello' ] | CODE |
| LOW | …ql/test/query-tests/Variables/unused/variables_test.py | 2 | __all__ = [ 'is_used_var1' ] | CODE |
| LOW | …hon/ql/test/query-tests/Variables/undefined/exports.py | 1 | __all__ = ["foo", "bar", "baz", "quux", "blat", "frob", "nosuch", "i_got_it_elsewhere"] | CODE |
| LOW | …n/ql/test/query-tests/Variables/undefined/ud_helper.py | 12 | __all__ = [ 'a', 'b', 'c' ] | CODE |
| LOW | …t/query-tests/Variables/undefined/decorated_exports.py | 3 | __all__ = ["foo", "bar", "baz", "not_defined"] | CODE |
| LOW | …thon/ql/test/query-tests/Variables/undefined/tokens.py | 8 | __all__ = [ "TOKEN_0" ] | CODE |
| LOW | …query-tests/Variables/undefined/unknown_import_star.py | 1 | __all__ = ["foo"] | CODE |
| LOW | …l/test/query-tests/Functions/general/functions_test.py | 4 | __all__ = [ '' ] | CODE |
| LOW | …/query-tests/Functions/return_values/functions_test.py | 4 | __all__ = [ '' ] | CODE |
| LOW⚡ | python/ql/test/experimental/import-resolution/trace.py | 52 | __all__ = ["enter", "exit", "check", "status"] | CODE |
| LOW | …test/experimental/import-resolution/has_defined_all.py | 7 | __all__ = ["all_defined_foo"] | CODE |
| LOW | …experimental/import-resolution/has_defined_all_copy.py | 9 | __all__ = ["all_defined_foo_copy"] | CODE |
| LOW | …ibrary-tests/PointsTo/new/code/test_package/module1.py | 1 | __all__ = [ 'p', 'q', 'r' ] | CODE |
| LOW | …ibrary-tests/PointsTo/new/code/test_package/module2.py | 1 | __all__ = [ 'r', 's'] | CODE |
| LOW | …n/ql/test/library-tests/modules/__all__/all_dynamic.py | 6 | __all__ = ["foo"] | CODE |
| LOW | …thon/ql/test/library-tests/modules/__all__/all_list.py | 6 | __all__ = ["foo", "bar"] | CODE |
| LOW | python/ql/test/modelling/MyPackage/ModuleWithAll.py | 1 | __all__ = ['Foo'] | CODE |
| LOW | python/ql/test/extractor-tests/exports/module1.py | 1 | __all__ = [ 'a', 'b', 'c', 'd' ] | CODE |
| LOW | …test/3/query-tests/Variables/undefined/enum_convert.py | 8 | __all__ = [ "Maybe", "Maybe_not" ] | CODE |
| LOW | …/ql/test/3/query-tests/Variables/undefined/imp_star.py | 3 | __all__ = [ "a", "b" ] | CODE |
| LOW | …t/3/query-tests/Variables/undefined/UndefinedExport.py | 3 | __all__ = [ "x", "y", "z", "module", "w" ] | CODE |
| LOW | …t/3/query-tests/Variables/undefined/mutated_globals.py | 3 | __all__ = [ "a", "b" ] | CODE |
| LOW | …/3/query-tests/Variables/undefined/package/__init__.py | 1 | __all__ = [ "module", "not_exists" ] | CODE |
| LOW | python/ql/test/3/library-tests/types/functions/test.py | 4 | __all__ = [ '' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module4.py | 1 | __all__ = [ 'p', 'q', 'r'] | CODE |
| LOW | …-tests/modules/package_members/test_package/module1.py | 1 | __all__ = [ 'a', 'b', 'c' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module2.py | 1 | __all__ = [ 'x', 'y', 'z'] | CODE |
| LOW | …t/2/query-tests/Variables/undefined/UndefinedExport.py | 3 | __all__ = [ "x", "y", "z", "module" ] | CODE |
| LOW | …/2/query-tests/Variables/undefined/package/__init__.py | 1 | __all__ = [ "module", "not_exists" ] | CODE |
| LOW | …l/test/2/library-tests/PointsTo/imports/package/foo.py | 5 | __all__ = ['foo'] | CODE |
| LOW | python/ql/test/2/library-tests/types/functions/test.py | 4 | __all__ = [ '' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module4.py | 1 | __all__ = [ 'p', 'q', 'r'] | CODE |
| LOW | …-tests/modules/package_members/test_package/module1.py | 1 | __all__ = [ 'a', 'b', 'c' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module2.py | 1 | __all__ = [ 'x', 'y', 'z'] | CODE |
| LOW | python/ql/src/Imports/UnintentionalImport.py | 3 | __all__ = ['tax1', 'tax2'] #defines the names to import when '*' is used | CODE |
| LOW | python/ql/src/Variables/UndefinedExport.py | 1 | __all__ = ['spamm', 'troll', 'paywall'] | CODE |
| LOW | rust/scripts/update_rust_analyzer.py | 172 | def update_fixed_rust_toolchain_versions(version: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | go/ql/test/library-tests/semmle/go/Types/promoted.go | 5 | // IMPORTANT: Make sure that *pkg1.SEmbedP is not referenced. | COMMENT |
| LOW | python/extractor/extending-the-parser.md | 3 | ## Step 1: Add an extractor test | COMMENT |
| LOW | python/extractor/extending-the-parser.md | 38 | ## Step 2: Extend the `tree-sitter-python` grammar | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 79 | ## Step 3: Extend `python.tsg` | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 85 | ## Step 4: Extend the set of known AST nodes | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 91 | ## Step 5: Rebuild the autogenerated AST and database scheme | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 95 | ## Step 6: Add dbscheme upgrade and downgrade scripts | COMMENT |
| LOW | …st/2/query-tests/Expressions/TruncatedDivision_test.py | 3 | # NOTE: The following test case will only work under Python 2. | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 133 | // Step 1: Perform classical ECDH key agreement to derive a shared secret. | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 136 | // Step 2: Combine the ECDH secret and the post-quantum secret using a | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 144 | // Step 3: Encrypt the data using AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 129 | // Step 1: Encrypt plaintext with AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 132 | // Step 2: Encrypt the AES-GCM ciphertext with ChaCha20-Poly1305. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 136 | // Step 3: Decrypt the outer layer (ChaCha20-Poly1305). | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 139 | // Step 4: Decrypt the inner layer (AES-GCM). | COMMENT |
| LOW | …tests/Security/CWE/CWE-428/UnsafeCreateProcessCall.cpp | 187 | // NOTE: This function will not be flagged as having a bug by this rule. | COMMENT |
| LOW | …tests/Security/CWE/CWE-428/UnsafeCreateProcessCall.cpp | 222 | // NOTE: This function will not be flagged as having a bug by this rule. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/ql/test/query-tests/Classes/useless/test.py | 9 | def do_something(self): | CODE |
| LOW | python/ql/test/query-tests/Classes/useless/test.py | 21 | def do_something(self): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 33 | def do_something(self): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 39 | def do_something(self): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 47 | def do_something(self, x): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 56 | def do_something(self, x): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 64 | def do_something(self): | CODE |
| LOW | …-tests/Resources/FileNotAlwaysClosed/resources_test.py | 298 | def do_something(self): | CODE |
| LOW | …l/test/query-tests/Variables/general/variables_test.py | 84 | def test_function(the_fixture): | CODE |
| LOW | python/ql/test/library-tests/dataflow/calls/test.py | 14 | def my_method(self, arg): | CODE |
| LOW | python/ql/test/library-tests/ApiGraphs/py3/deftest2.py | 7 | def my_method(self): # $ def=moduleImport("flask").getMember("views").getMember("View").getASubclass().getMember("my | CODE |
| LOW | …l/test/library-tests/frameworks/flask/response_test.py | 94 | def helper(): | CODE |
| LOW | …-tests/frameworks/stdlib/wsgiref_simple_server_test.py | 35 | def my_method(self, _env, start_response): # $ requestHandler | CODE |
| LOW | …brary-tests/ControlFlow/evaluation-order/test_async.py | 26 | async def helper(): | CODE |
| LOW | …test/extractor-tests/comment-on-decorator-line/test.py | 5 | def my_function(): | CODE |
| LOW | python/ql/test/3/library-tests/types/functions/test.py | 118 | def do_something(): | CODE |
| LOW | python/ql/test/2/library-tests/types/functions/test.py | 118 | def do_something(): | CODE |
| LOW | …ql/test/query-tests/Security/CWE-079/DomBasedXss/d3.js | 7 | function doSomething() { | CODE |
| LOW | …/test/library-tests/UnderlyingTypes/contextualTypes.ts | 7 | declare function doSomething(options: Options); | CODE |
| LOW | …l/test/library-tests/frameworks/ReactJS/use-server1.js | 1 | async function getData( | CODE |
| LOW | …l/test/library-tests/frameworks/ReactJS/use-server2.js | 3 | export async function getData( | CODE |
| LOW | …t/ql/test/library-tests/frameworks/SQL/mysql2-types.ts | 3 | export function doSomething(conn: Connection) { | CODE |
| LOW | …t/ql/test/library-tests/frameworks/SQL/sqlite-types.ts | 3 | export function doSomething(db: Database) { | CODE |
| LOW | …/ql/test/library-tests/frameworks/SQL/spanner-types.ts | 3 | export function doSomething(db: Database) { | CODE |
| LOW | javascript/ql/src/Expressions/examples/MissingAwait.js | 1 | async function getData(id) { | CODE |
| LOW | …script/ql/src/Expressions/examples/MissingAwaitGood.js | 1 | async function getData(id) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …hon/ql/test/query-tests/Statements/unreachable/test.py | 21 | CODE | |
| MEDIUM | …ql/test/query-tests/Variables/unused/variables_test.py | 137 | CODE | |
| MEDIUM | …ql/test/query-tests/Variables/unused/variables_test.py | 139 | CODE | |
| MEDIUM | …/query-tests/Variables/undefined/UninitializedLocal.py | 14 | CODE | |
| MEDIUM | python/ql/test/library-tests/types/exceptions/test.py | 26 | CODE | |
| MEDIUM | python/ql/test/library-tests/stmts/raise_stmt/test.py | 4 | CODE | |
| MEDIUM | …brary-tests/ControlFlow/evaluation-order/test_basic.py | 181 | CODE | |
| MEDIUM | …/ql/test/extractor-tests/splitter/unreachable_split.py | 5 | CODE | |
| MEDIUM | …/ql/test/extractor-tests/splitter/unreachable_split.py | 9 | CODE | |
| MEDIUM | …/query-tests/Statements/unreachable_suppressed/test.py | 39 | CODE | |
| MEDIUM | …on/ql/test/2/query-tests/Exceptions/generators/test.py | 11 | CODE | |
| MEDIUM | python/ql/src/Statements/UnreachableCode.py | 5 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/extractor/buildtools/version.py | 28 | # working on potential older versions, we'll just use `py --version` which forwards | COMMENT |
| MEDIUM | python/extractor/semmle/python/passes/objects.py | 245 | #This code must be robust against (possibly intentionally) incorrect implementations | COMMENT |
| LOW | python/extractor/blib2to3/pgen2/pgen.py | 373 | # Can't just return self.arcs == other.arcs, because that | COMMENT |
| MEDIUM | …extractor/src/main/kotlin/comments/CommentExtractor.kt | 52 | // The actual extractor logic is a bit more nuanced than | COMMENT |
| LOW | …sts/kotlin/posix/java_kotlin_extraction_orders/test.py | 121 | # No jar file involved, just add the dependency build directory to the classpath: | COMMENT |
| MEDIUM | …s/Format/WrongTypeFormatArguments/Buildless/second.cpp | 31 | // and robust but the developer may know enough to make this safe) | COMMENT |
| MEDIUM | swift/tools/incompatible-os/IncompatibleOs.cpp | 4 | // This is implemented as a C++ binary instead of a hardcoded JSON file so we can leverage existing | COMMENT |
| MEDIUM | swift/extractor/mangler/SwiftMangler.cpp | 457 | // which ExtensionDecl or ValueDecl it's mentioned in) might be more robust, but there doesn't | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 133 | // Step 1: Perform classical ECDH key agreement to derive a shared secret. | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 136 | // Step 2: Combine the ECDH secret and the post-quantum secret using a | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 144 | // Step 3: Encrypt the data using AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 129 | // Step 1: Encrypt plaintext with AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 132 | // Step 2: Encrypt the AES-GCM ciphertext with ChaCha20-Poly1305. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 136 | // Step 3: Decrypt the outer layer (ChaCha20-Poly1305). | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 139 | // Step 4: Decrypt the inner layer (AES-GCM). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …src/experimental/Security/CWE-1427/examples/example.py | 9 | goodAgent = GuardrailAgent( # GOOD: Agent created with guardrails automatically configured. | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 134 | input: userInput, // OK - guarded client with input guardrails | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 143 | content: userInput, // OK - guarded client with input guardrails | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 156 | input: userInput, // OK - guarded Azure client with pre_flight guardrails | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 159 | // === Unprotected GuardrailsOpenAI: no input guardrails (SHOULD ALERT) === | COMMENT |
| MEDIUM | …urity/CWE-1427/examples/user-prompt-injection_fixed.js | 6 | // An input guardrail (here, the OpenAI guardrails library) inspects the user input and | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/scripts/create-change-note.py | 115 | # Check if running in interactive mode (no arguments) or with arguments | COMMENT |
| LOW | misc/scripts/library-coverage/generate-timeseries.py | 227 | # Close files: | COMMENT |
| LOW | python/extractor/lark/parsers/cyk.py | 106 | # Check if the parse succeeded. | COMMENT |
| LOW | python/extractor/semmle/python/modules.py | 48 | #Set source to a latin-1 decoding of source string (which cannot fail). | COMMENT |
| LOW | …est/query-tests/Variables/undefined/UndefinedGlobal.py | 146 | # Set them to (), so that isinstance() works with them | COMMENT |
| LOW | …java/buildless-dependency-different-repository/test.py | 10 | # Check if process died | COMMENT |
| LOW | …ation-tests/java/maven_3_fetch_maven_4_wrapper/test.py | 15 | # Set maven_home_path to the extracted directory | COMMENT |
| LOW | …ry-tests/Security/CWE-077/.github/workflows/test17.yml | 24 | # Check if the event is a pull request or pull_request_target | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/generators/qlgen.py | 82 | CODE | |
| LOW | python/extractor/semmle/logging.py | 304 | CODE | |
| LOW | python/extractor/semmle/python/passes/flow.py | 1220 | CODE | |
| LOW | python/extractor/semmle/python/passes/flow.py | 1555 | CODE | |
| LOW | …thon/ql/test/library-tests/PointsTo/decorators/test.py | 12 | CODE | |
| LOW | …thon/ql/test/library-tests/PointsTo/decorators/test.py | 19 | CODE | |
| LOW | …thon/ql/test/library-tests/ApiGraphs/py3/async_test.py | 12 | CODE | |
| LOW | …thon/ql/test/library-tests/ApiGraphs/py3/async_test.py | 29 | CODE | |
| LOW | python/ql/src/Security/CWE-022/examples/tainted_path.py | 11 | CODE | |
| LOW | python/ql/src/Security/CWE-022/examples/tainted_path.py | 19 | CODE | |
| LOW | python/ql/src/Security/CWE-022/examples/tainted_path.py | 30 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | swift/extractor/mangler/SwiftMangler.h | 158 | // In this implementation, fetching gives a hash of the mangled name itself, leading to a direct | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …l/test/library-tests/frameworks/flask/response_test.py | 29 | # TODO: Create test-cases for the many ways that `make_response` can be used | COMMENT |
| LOW | …l/test/library-tests/frameworks/flask/response_test.py | 187 | # TODO: add tests for setting status code | COMMENT |
| LOW | python/ql/test/library-tests/frameworks/data/test.py | 128 | # TODO: implement support for lists | COMMENT |
| LOW | python/ql/test/library-tests/frameworks/data/test.py | 131 | # TODO: implement support for tuples | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …emmle.Extraction.CSharp.StubGenerator/StubGenerator.cs | 75 | writer.WriteLine("// This file contains auto-generated code."); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …experimental/library-tests/quantum/jca/IVArtifact.java | 216 | // Fixed IV (all zeros for demonstration purposes; insecure in production) | COMMENT |
| LOW | …query-tests/Security/CWE-829/.github/workflows/poc.yml | 33 | # For PRs make sure to checkout the PR branch | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tegration-tests/update-ferstl-depgraph-dependencies.sh | 14 | # Usage: | COMMENT |
| LOW | java/ql/src/utils/modelconverter/ConvertExtensions.py | 2 | # Usage: | COMMENT |
| LOW | csharp/ql/src/utils/modelconverter/ConvertExtensions.py | 2 | # Usage: | COMMENT |