Issues

New issue

Python: Model MCP and FastMCP server handler parameters as remote sources (#22702)
Unread
#22750 opened Oct 4, 2026 · Updated Oct 5, 2026
1
JS: Add models for the MCP server SDKs and flow summaries for zod
Unread
#22749 opened Oct 3, 2026 · Updated Oct 3, 2026
C#: Recognize safe output encoding in cs/log-forging
Unread
#22737 opened Oct 2, 2026 · Updated Oct 2, 2026
JS: Add models-as-data for openapi-backend
Unread
#22715 opened Sep 30, 2026 · Updated Oct 1, 2026
5
Python: Add models for the MCP server SDKs (mcp, fastmcp)
Unread
#22703 opened Sep 30, 2026 · Updated Sep 30, 2026
Python: Fix isType false positive on modules named *typing (fixes #22…
Unread
#22686 opened Sep 25, 2026 · Updated Oct 1, 2026Draft
Actions: report floating tags of immutable Actions in actions/unpinned-tag
Unread
#22630 opened Sep 20, 2026 · Updated Oct 5, 2026
cpp: Model BDE single-element concurrent queue operations
Unread
#22584 opened Sep 15, 2026 · Updated Sep 16, 2026
2
cpp: model BDE character views and substring utilities
Unread
#22583 opened Sep 15, 2026 · Updated Sep 16, 2026
1
cpp: model standard and BDE optional contents
Unread
#22582 opened Sep 15, 2026 · Updated Sep 16, 2026
3
cpp: model BDE nullable and variant contents
Unread
#22581 opened Sep 15, 2026 · Updated Sep 16, 2026
5
Java: Improve URI host allowlist checks
Unread
#22578 opened Sep 15, 2026 · Updated Sep 16, 2026
JavaScript: Treat LinkifyIt match calls as non-RegExp operations
Unread
#22577 opened Sep 15, 2026 · Updated Sep 29, 2026
7
cpp: Model BDE Base64 and hex pointer-buffer conversions
Unread
#22563 opened Sep 14, 2026 · Updated Sep 30, 2026
5
cpp: Model BlazingMQ bmqa message and property taint flow
Unread
#22538 opened Sep 9, 2026 · Updated Sep 28, 2026
5
Python: Model shell -c command arguments
Unread
#22434 opened Aug 26, 2026 · Updated Sep 15, 2026
Java: Add Spring MVC URL redirect sinks
Unread
#22362 opened Aug 17, 2026 · Updated Sep 15, 2026
Python: Handle dynamic module exports
Unread
#22354 opened Aug 16, 2026 · Updated Sep 15, 2026
Python: add SQL injection models for the duckdb package
Unread
#22352 opened Aug 15, 2026 · Updated Sep 15, 2026
1
Rust: Add unsafe deserialization query (CWE-502)
Unread
#22324 opened Aug 12, 2026 · Updated Sep 15, 2026
12
Python: Model ldap3 paged searches
Unread
#22303 opened Aug 9, 2026 · Updated Sep 15, 2026
Python: Parse class bases like function arguments
Unread
#22301 opened Aug 7, 2026 · Updated Sep 27, 2026
12
Python: Ignore await and typing ellipsis as non-effectful statements
Unread
#22291 opened Aug 6, 2026 · Updated Sep 15, 2026
Python: Reduce log injection false positives
Unread
#22231 opened Jul 23, 2026 · Updated Oct 1, 2026
1
Add repr() and %r sanitizers to py/log-injection query to reduce false positives
Unread
#22038 opened Jun 23, 2026 · Updated Sep 15, 2026
1

Navigation Menu

Issues

Issues

Python: Model MCP and FastMCP server handler parameters as remote sources (#22702)

JS: Add models for the MCP server SDKs and flow summaries for zod

C#: Recognize safe output encoding in cs/log-forging

JS: Add models-as-data for openapi-backend

Python: Add models for the MCP server SDKs (`mcp`, `fastmcp`)

Python: Fix isType false positive on modules named *typing (fixes #22…

Actions: report floating tags of immutable Actions in `actions/unpinned-tag`

cpp: Model BDE single-element concurrent queue operations

cpp: model BDE character views and substring utilities

cpp: model standard and BDE optional contents

cpp: model BDE nullable and variant contents

Java: Improve URI host allowlist checks

JavaScript: Treat LinkifyIt match calls as non-RegExp operations

cpp: Model BDE Base64 and hex pointer-buffer conversions

cpp: Model BlazingMQ bmqa message and property taint flow

Python: Model shell -c command arguments

Java: Add Spring MVC URL redirect sinks

Python: Handle dynamic module exports

Python: add SQL injection models for the duckdb package

Rust: Add unsafe deserialization query (CWE-502)

Python: Model ldap3 paged searches

Python: Parse class bases like function arguments

Python: Ignore await and typing ellipsis as non-effectful statements

Python: Reduce log injection false positives

Add repr() and %r sanitizers to py/log-injection query to reduce false positives