All pull requests

Pull requests

• unified: Avoid overflow in taint reach per million nodes

  no-change-note-requiredUnified
  #22833·asgerf opened Oct 15, 2026Contributor·

  ·
  1

• C++: Add support for more builtin operations

  C++depends on internal PRdocumentation
  #22832·jketema opened Oct 15, 2026Contributor·

  ·

• Rust: Update rust-analyzer to 0.0.358

  RubyRustUnified
  #22831·github-actions[bot] opened Oct 15, 2026Bot·

  ·
  2

• C++: Introduce getBitWidth predicate for Type

  C++documentation
  #22830·jketema opened Oct 15, 2026Contributor·

  ·
  14

• JS: Do not flag computed __proto__ properties

  documentationexternal-contributionJS
  #22829·eugeniodepalo opened Oct 15, 2026·

  ·
  1

• Rust: Add documentation and type inference for CfgPredExpr and CfgPredPat

  no-change-note-requiredRust
  #22828·paldepind opened Oct 15, 2026Contributor·

  ·
  5

• Java: Recognize constant string comparisons as taint sanitizers

  documentationJava
  #22826·owen-mc opened Oct 15, 2026Contributor·

  ·
  2

• Go: Handle quoted dots in hostname regexps

  documentationexternal-contributionGo
  #22824·theinfosecguy opened Oct 14, 2026Contributor·

  ·
  1

  2

• Actions: Do not treat job.workflow_* as untrusted input

  Actionsdocumentationexternal-contribution
  #22823·cplieger opened Oct 14, 2026·

  ·

• Java: detect command injection through delegating launchers

  Java
  #22818·owen-mc with CopilotAI opened Oct 14, 2026·

  ·
  16

  

• Unified: Preserve generic arguments on qualified Swift types

  no-change-note-requiredUnified
  #22817·paldepind opened Oct 14, 2026Contributor·

  ·
  1

• Unified: Add CFG support for loop guards and defer

  no-change-note-requiredUnified
  #22815·aschackmull opened Oct 13, 2026Contributor·

  ·
  9

• Unified: Extract Swift attributed types

  no-change-note-requiredUnified
  #22813·paldepind opened Oct 13, 2026Contributor·

  ·
  2

• Python: model PyMongo collection reads as database sources

  documentationexternal-contributionPython
  #22812·kazuki-netizen opened Oct 13, 2026·

  ·

• C++: Create quality suite

  C++documentation
  #22811·geoffw0 opened Oct 12, 2026Contributor·

  ·

• Unified: flow summaries

  DataFlow LibraryUnified
  #22809·asgerf opened Oct 12, 2026Contributor·

  ·

• JS: Improve support for NodeJS pipe callbacks

  documentationJS
  #22808·MathiasVP opened Oct 12, 2026Contributor·

  ·
  2

• CFG: Handle parameter cfg explicitly.

  #22807·aschackmull opened Oct 12, 2026Contributor·

  ·

• C++: reduce scanf false positives after fallback initialization

  C++documentationexternal-contribution
  #22804·SkyCipherr opened Oct 11, 2026·

  ·

• Actions: Resolve $/ self repository references to local callables

  Actionsdocumentationexternal-contribution
  #22802·WilliamBerryiii opened Oct 9, 2026·

  ·
  1

  1

• MaD: update generator scripts to support writing JSON data extensions

  #22798·nickrolfe opened Oct 9, 2026Contributor·

  ·
  7

• Go: Add models for go 1.21

  documentationGo
  #22797·owen-mc opened Oct 9, 2026Contributor·

  ·
  6

• Unified: Improve type inference for constructor calls

  Unified
  #22796·hvitved opened Oct 9, 2026Contributor·

  ·

• Docs: Document QlBuiltins::NewEntity for db upgrade/downgrade scripts

  documentation
  #22787·owen-mc opened Oct 8, 2026Contributor·

  ·
  3

• yeast: Add AST for rewrite rules

  documentationno-change-note-required
  #22786·tausbn opened Oct 8, 2026Contributor·

  ·
  10