This repository was archived by the owner on Apr 4, 2025. It is now read-only.
Folders and files
| Name | Name | Last commit message | Last commit date |
|---|
parent directory.. |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
|
| Name |
Severity |
Path |
| Resolving XML external entity in user-controlled data |
Unknown / 6.0 |
java/CWE-611/XXELocal.ql |
| RCE in Log4j CVE-2021-44228 |
High / 9.9 |
java/CWE-094/CVE-2021-44228.ql |
| Base64 Encoding of Sensitive Information |
High / 8.0 |
java/CWE-326/Base64Encryption.ql |
| Uncontrolled data used in path expression |
Unknown / 7.5 |
java/CWE-021/TaintedPath.ql |
| Cross-site scripting |
Unknown / 6.1 |
java/examples/XSSCustomSanitizer.ql |
| Hard-coded password field |
Unknown / 9.8 |
java/CWE-798/HardcodedPasswordsInProperties.ql |
| Sensitive information exposure through logging |
Unknown / 8.0 |
java/CWE-532/SensitiveInformation.ql |
| Use of Cryptographically Weak Pseudo-Random Number Generator |
Medium / 6.0 |
java/CWE-338/WeakPRNG.ql |
| Customized Cross-site scripting |
Unknown / 6.1 |
java/CWE-079/XSSJSP.ql |
| Customized Cross-site scripting |
Unknown / 6.1 |
java/CWE-079/XSSJSPLenient.ql |
| Name |
Queries Count |
Description |
Path |
| default |
70 |
Default Query Suite |
codeql/java/ql/src/codeql-suites/code-scanning |
| extended |
107 |
Security Extended Suite |
codeql/java/ql/src/codeql-suites/security-extended |
| quality |
227 |
Security and Quality Extended Suite |
codeql/java/ql/src/codeql-suites/security-and-quality |
| local-variants |
119 |
Security Extended with local variants enabled |
advanced-security/codeql-queries/java/suites/codeql-java-local.qls@main |
| super-extended |
10 |
Security Extended with Experimental and Custom Queries Suite |
advanced-security/codeql-queries/java/suites/codeql-java.qls@main |
| audit |
1 |
Security Audit Query Suite |
advanced-security/codeql-queries/java/suites/codeql-java-audit.qls@main |