All issues

Search results

actions/unpinned-tag: recognize GitHub Immutable Releases per-tag instead of a static repo allow-list

Status: Open.

#22674 In github/codeql;

· jessehouwing opened on Sep 24, 2026

Rust: Update rust-analyzer to 0.0.352

agentic-workflows

Status: Open.

#22660 In github/codeql;

· github-actions opened on Sep 23, 2026

C++ extractor crashes with coordinates_of_template_param_symbol assertion on a dependent default non-type template parameter used through a libc++ alias over a pack

bugSomething isn't workingSomething isn't working

C++

Status: Open.

#22658 In github/codeql;

· jaf0rk opened on Sep 23, 2026

[aw] Detection Runs

agentic-workflows

Status: Open.

#22642 In github/codeql;

· github-actions opened on Sep 22, 2026

JavaScript externs model StorageEvent() with no type argument

false-positive

javascriptPull requests that update Javascript codePull requests that update Javascript code

Status: Open.

#22632 In github/codeql;

· jmcerda opened on Sep 20, 2026

Python: isType treats any object in a module named *typing as a type, corrupting points-to for unrelated containers

false-positive

Status: Open.

#22621 In github/codeql;

· mauvilsa opened on Sep 18, 2026

barrierModel arity mismatch: "Expected 4, but was 3" on documented-correct 3-column rows (python-all, javascript-all)

awaiting-responseThe CodeQL team is awaiting further input or clarification from the original reporter of this issue.The CodeQL team is awaiting further input or clarification from the original reporter of this issue.

questionFurther information is requestedFurther information is requested

Status: Open.

#22597 In github/codeql;

· mukul-ram opened on Sep 16, 2026

[False Negative/Question] Taint steps added by isAdditionalFlowStep ignore tainted content

questionFurther information is requestedFurther information is requested

Status: Open.

#22596 In github/codeql;

· UpsideDownFoxxo opened on Sep 16, 2026

Python extractor reports parse errors for files no longer in the scanned commit

awaiting-responseThe CodeQL team is awaiting further input or clarification from the original reporter of this issue.The CodeQL team is awaiting further input or clarification from the original reporter of this issue.

questionFurther information is requestedFurther information is requested

Status: Open.

#22579 In github/codeql;

· mosbasik opened on Sep 15, 2026

C#: cs/simplifiable-boolean-expression false positive on Nullable<bool> compared with a literal

Status: Open.

#22556 In github/codeql;

· altwohill opened on Sep 14, 2026

False positive: js/incomplete-hostname-regexp treats LinkifyIt.match(text) as a regex call

Status: Open.

#22546 In github/codeql;

· MaksymShostak opened on Sep 11, 2026

Rust: query evaluation ~15× slower on 2.26.4 vs 2.26.3 (4 min → 45–60 min, type-inference/data-flow stage)

Status: Open.

#22463 In github/codeql;

· tanmaysolanki95 opened on Aug 28, 2026