Commit history

1. Commits on Oct 1, 2026

   • Release preparation for version 2.27.2

     

     github-actions[bot]

     committed
     1317b66View commit details

     Copy full SHA for 1317b66

     View code at this pointBrowse repository at this point
2. Commits on Sep 29, 2026

   • Merge pull request #22300 from jketema/jketema/ecma-regex

     Show description for 4e39cc1
     jketema

     authored
     4e39cc1View commit details

     Copy full SHA for 4e39cc1

     View code at this pointBrowse repository at this point
3. Commits on Sep 28, 2026

   • Merge pull request #22562 from trail-of-forks/comdb2-sql-injection-models

     Show description for 4048b13
     geoffw0

     authored
     4048b13View commit details

     Copy full SHA for 4048b13

     View code at this pointBrowse repository at this point
4. Commits on Sep 24, 2026

   • test(cpp): remove invalid balxml encoder taint assertion

     Show description for 2c14c74
     kumarak

     committed
     2c14c74View commit details

     Copy full SHA for 2c14c74

     View code at this pointBrowse repository at this point

   • fix(cpp): regenerate bal codec flow expectations

     Show description for e29add6
     

     kumarak

     and

     geoffw0

     committed
     e29add6View commit details

     Copy full SHA for e29add6

     View code at this pointBrowse repository at this point

   • C++: Model BDE bal codec taint flow

     Show description for 5286eae
     

     kumarak

     and

     geoffw0

     committed
     5286eaeView commit details

     Copy full SHA for 5286eae

     View code at this pointBrowse repository at this point

   • fix(cpp): update bslx reset signature expectations

     kumarak

     committed
     c14358aView commit details

     Copy full SHA for c14358a

     View code at this pointBrowse repository at this point

   • fix(cpp): address remaining bslx review feedback

     kumarak

     committed
     b704ed4View commit details

     Copy full SHA for b704ed4

     View code at this pointBrowse repository at this point

   • cpp: model BDE bslx in-stream deserialization taint flow

     Show description for 1021241
     kumarak

     committed
     1021241View commit details

     Copy full SHA for 1021241

     View code at this pointBrowse repository at this point
5. Commits on Sep 18, 2026

   • Merge pull request #22438 from Tito0015/feature/cpp-mmio-unsanitized-memcpy

     Show description for cdcde47
     geoffw0

     authored
     cdcde47View commit details

     Copy full SHA for cdcde47

     View code at this pointBrowse repository at this point
6. Commits on Sep 17, 2026

   • cpp: address review nits on qhelp references and test header

     Tito0015

     committed
     e41e090View commit details

     Copy full SHA for e41e090

     View code at this pointBrowse repository at this point

   • cpp: remove non-ASCII character in test file

     Tito0015

     committed
     ff2416bView commit details

     Copy full SHA for ff2416b

     View code at this pointBrowse repository at this point

   • cpp: fix alert location and update integration test expectations

     Tito0015

     committed
     5d6e2d4View commit details

     Copy full SHA for 5d6e2d4

     View code at this pointBrowse repository at this point

   • cpp: Drop experimental query id prefix and change note

     Tito0015

     committed
     56c5f3aView commit details

     Copy full SHA for 56c5f3a

     View code at this pointBrowse repository at this point

   • cpp: Move mmio-unsanitized-memcpy to experimental

     Show description for 30544e8
     Tito0015

     committed
     30544e8View commit details

     Copy full SHA for 30544e8

     View code at this pointBrowse repository at this point

   • cpp: Add change note for mmio-unsanitized-memcpy query

     Tito0015

     committed
     e20ec33View commit details

     Copy full SHA for e20ec33

     View code at this pointBrowse repository at this point

   • cpp: Add 'cpp/mmio-unsanitized-memcpy' query

     Tito0015

     committed
     b681bc4View commit details

     Copy full SHA for b681bc4

     View code at this pointBrowse repository at this point

   • Post-release preparation for codeql-cli-2.27.1

     

     github-actions[bot]

     committed
     168d999View commit details

     Copy full SHA for 168d999

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.27.1

     

     github-actions[bot]

     committed
     903466fView commit details

     Copy full SHA for 903466f

     View code at this pointBrowse repository at this point
7. Commits on Sep 16, 2026

   • C++: Remove inline expectation comment from included file

     hvitved

     committed
     7c8d3afView commit details

     Copy full SHA for 7c8d3af

     View code at this pointBrowse repository at this point

   • Inline expectations: Ignore results in files outside the source dir

     hvitved

     committed
     0aba99bView commit details

     Copy full SHA for 0aba99b

     View code at this pointBrowse repository at this point

   • Merge pull request #22532 from MathiasVP/flow-through-forwards-using-callbacks-3

     Show description for f920aef
     MathiasVP

     authored
     f920aefView commit details

     Copy full SHA for f920aef

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into flow-through-forwards-using-callbacks-3

     MathiasVP

     committed
     18affcdView commit details

     Copy full SHA for 18affcd

     View code at this pointBrowse repository at this point

   • C++: Add a high-level description of the forwarding model.

     MathiasVP

     committed
     dee5142View commit details

     Copy full SHA for dee5142

     View code at this pointBrowse repository at this point

   • C++: Accept test changes.

     MathiasVP

     committed
     f00b553View commit details

     Copy full SHA for f00b553

     View code at this pointBrowse repository at this point

   • C++: Handle forwarding without a constructor.

     MathiasVP

     committed
     f52d18cView commit details

     Copy full SHA for f52d18c

     View code at this pointBrowse repository at this point

   • C++: Add a testcase with forwarding without a constructor.

     MathiasVP

     committed
     d9331e9View commit details

     Copy full SHA for d9331e9

     View code at this pointBrowse repository at this point

   • C++: Add a testcase that uses type parameters in the function name for forwarding.

     MathiasVP

     committed
     8149caaView commit details

     Copy full SHA for 8149caa

     View code at this pointBrowse repository at this point

   • C++: Expand QLDoc.

     MathiasVP

     committed
     f381119View commit details

     Copy full SHA for f381119

     View code at this pointBrowse repository at this point

   • C++: Add a testcase that uses a hardcoded constructed type.

     MathiasVP

     committed
     dcda06aView commit details

     Copy full SHA for dcda06a

     View code at this pointBrowse repository at this point
8. Commits on Sep 15, 2026

   • C++: Accept test changes.

     MathiasVP

     committed
     fd9c8caView commit details

     Copy full SHA for fd9c8ca

     View code at this pointBrowse repository at this point

   • C++: Handle 'isPRValueFieldAccessWithImplicitLoad' in more places.

     MathiasVP

     committed
     19a9095View commit details

     Copy full SHA for 19a9095

     View code at this pointBrowse repository at this point

   • C++: Add a test with invalid IR.

     MathiasVP

     committed
     c00a114View commit details

     Copy full SHA for c00a114

     View code at this pointBrowse repository at this point
9. Commits on Sep 14, 2026

   • C++: Model Comdb2 SQL execution sinks

     kumarak

     committed
     75d9457View commit details

     Copy full SHA for 75d9457

     View code at this pointBrowse repository at this point

   • Merge pull request #22336 from theinfosecguy/cpp-ambiguous-assignment-condition

     Show description for 4a19c87
     geoffw0

     authored
     4a19c87View commit details

     Copy full SHA for 4a19c87

     View code at this pointBrowse repository at this point