Commit history

1. Commits on Oct 14, 2026

   • Make queries use ActiveThreatModelSource, not RemoteFlowSource

     Show description for 9b363ee
     owen-mc

     committed
     9b363eeView commit details

     Copy full SHA for 9b363ee

     View code at this pointBrowse repository at this point
2. Commits on Jun 22, 2026

   • Python: deprecate AstNode.getAFlowNode() and rewrite internal callers

     Show description for 717ff62
     

     Copilot

     authored and

     yoff

     committed
     717ff62View commit details

     Copy full SHA for 717ff62

     View code at this pointBrowse repository at this point
3. Commits on May 8, 2026

   • Note that common standard library types can be vulnerable to gadget-chain attacks

     owen-mc

     committed
     a5ef036View commit details

     Copy full SHA for a5ef036

     View code at this pointBrowse repository at this point

   • Python: remove doubles spaces from qhelp

     owen-mc

     committed
     93e05dbView commit details

     Copy full SHA for 93e05db

     View code at this pointBrowse repository at this point

   • Python: Clarify that deserialization following a schema is safe

     owen-mc

     committed
     e2874acView commit details

     Copy full SHA for e2874ac

     View code at this pointBrowse repository at this point
4. Commits on Mar 27, 2026

   • Python: Move isNetworkBind check into isSink

     tausbn

     committed
     187f7c7View commit details

     Copy full SHA for 187f7c7

     View code at this pointBrowse repository at this point

   • Python: Exclude `AF_UNIX` sockets from BindToAllInterfaces

     Show description for 4f74d42
     tausbn

     committed
     4f74d42View commit details

     Copy full SHA for 4f74d42

     View code at this pointBrowse repository at this point
5. Commits on Mar 26, 2026

   • Python: Convert BindToAllInterfaces to path-problem

     Show description for c9832c3
     tausbn

     committed
     c9832c3View commit details

     Copy full SHA for c9832c3

     View code at this pointBrowse repository at this point

   • Python: Replace type tracking with global data-flow

     Show description for c439fc5
     tausbn

     committed
     c439fc5View commit details

     Copy full SHA for c439fc5

     View code at this pointBrowse repository at this point
6. Commits on Mar 13, 2026

   • Change @security-severity for log injection queries from 7.8 to 6.1

     owen-mc

     committed
     056aa34View commit details

     Copy full SHA for 056aa34

     View code at this pointBrowse repository at this point

   • Change @security-severity for XSS queries from 6.1 to 7.8

     owen-mc

     committed
     f58a6e5View commit details

     Copy full SHA for f58a6e5

     View code at this pointBrowse repository at this point
7. Commits on Feb 12, 2026

   • Rewordings per copilot

     smowton

     authored
     5f970d9View commit details

     Copy full SHA for 5f970d9

     View code at this pointBrowse repository at this point
8. Commits on Feb 11, 2026

   • Enhance path validation recommendations

     Show description for bed1ec8
     smowton

     authored
     bed1ec8View commit details

     Copy full SHA for bed1ec8

     View code at this pointBrowse repository at this point
9. Commits on Jan 30, 2026

   • Allow MaD sanitizers for queries with MaD sinks

     owen-mc

     committed
     ef6332cView commit details

     Copy full SHA for ef6332c

     View code at this pointBrowse repository at this point
10. Commits on Jan 22, 2026

    • python: add machinery for MaD barriers

      Show description for 3dbfb9f
      yoff

      committed
      3dbfb9fView commit details

      Copy full SHA for 3dbfb9f

      View code at this pointBrowse repository at this point
11. Commits on Dec 3, 2025

    • Use more flowTo.

      aschackmull

      committed
      78e1879View commit details

      Copy full SHA for 78e1879

      View code at this pointBrowse repository at this point
12. Commits on Nov 26, 2025

    • Remove trailing periods from @name metadata in query files

      Show description for caf6b95
      felicitymay

      committed
      caf6b95View commit details

      Copy full SHA for caf6b95

      View code at this pointBrowse repository at this point
13. Commits on Nov 11, 2025

    • Merge pull request #20671 from github/napalys/adjust_query_severity

      Show description for d122534
      Napalys

      authored
      d122534View commit details

      Copy full SHA for d122534

      View code at this pointBrowse repository at this point
14. Commits on Oct 24, 2025

    • Merge pull request #20494 from joefarebrother/python-insecure-cookie-split

      Show description for 8c277bd
      joefarebrother

      authored
      8c277bdView commit details

      Copy full SHA for 8c277bd

      View code at this pointBrowse repository at this point
15. Commits on Oct 22, 2025

    • CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

      Napalys

      committed
      fa47174View commit details

      Copy full SHA for fa47174

      View code at this pointBrowse repository at this point
16. Commits on Oct 8, 2025

    • Remove hashing example when not covered by query

      owen-mc

      committed
      2f22acdView commit details

      Copy full SHA for 2f22acd

      View code at this pointBrowse repository at this point

    • Improve qhelp for broken crypto algo queries

      Show description for 0bcdb91
      owen-mc

      committed
      0bcdb91View commit details

      Copy full SHA for 0bcdb91

      View code at this pointBrowse repository at this point

    • Remove erroneous comma

      owen-mc

      committed
      2a1c9d8View commit details

      Copy full SHA for 2a1c9d8

      View code at this pointBrowse repository at this point
17. Commits on Sep 25, 2025

    • Update alert message

      joefarebrother

      committed
      cb7b1efView commit details

      Copy full SHA for cb7b1ef

      View code at this pointBrowse repository at this point
18. Commits on Sep 23, 2025

    • Update documentation

      joefarebrother

      committed
      55fd7c8View commit details

      Copy full SHA for 55fd7c8

      View code at this pointBrowse repository at this point

    • Align alert messages across languages.

      joefarebrother

      committed
      1208195View commit details

      Copy full SHA for 1208195

      View code at this pointBrowse repository at this point

    • Update and fix tests

      joefarebrother

      committed
      2cffb21View commit details

      Copy full SHA for 2cffb21

      View code at this pointBrowse repository at this point

    • Add sensitive data heuristic

      joefarebrother

      committed
      d28e800View commit details

      Copy full SHA for d28e800

      View code at this pointBrowse repository at this point
19. Commits on Sep 19, 2025

    • Rename qhelp file

      joefarebrother

      committed
      6eac6b7View commit details

      Copy full SHA for 6eac6b7

      View code at this pointBrowse repository at this point

    • Split test cases for insecure cookie queries

      joefarebrother

      committed
      2e95c2bView commit details

      Copy full SHA for 2e95c2b

      View code at this pointBrowse repository at this point

    • Update qhelp

      joefarebrother

      committed
      04316d3View commit details

      Copy full SHA for 04316d3

      View code at this pointBrowse repository at this point
20. Commits on Sep 18, 2025

    • Split insecure cookies queries into 3 queries

      joefarebrother

      committed
      7eabed6View commit details

      Copy full SHA for 7eabed6

      View code at this pointBrowse repository at this point
21. Commits on Sep 2, 2025

    • Apply suggestion from @aschackmull

      Show description for 90caded
      

      michaelnebel

      and

      aschackmull

      authored
      90cadedView commit details

      Copy full SHA for 90caded

      View code at this pointBrowse repository at this point
22. Commits on Sep 1, 2025

    • Python: Fix some Ql4Ql violations.

      michaelnebel

      committed
      dbd3125View commit details

      Copy full SHA for dbd3125

      View code at this pointBrowse repository at this point
23. Commits on May 19, 2025

    • Lower the precision of a range of harcoded password queries to remove them from query suites.

      michaelnebel

      committed
      03ecd24View commit details

      Copy full SHA for 03ecd24

      View code at this pointBrowse repository at this point