Search results

GitHub Actions curl rules parse explicit PowerShell steps as Bash

Status: Open.

#4001 In semgrep/semgrep-rules;

· meza opened on Jul 12, 2026

renovate-missing-minimum-release-age flags packageRules that inherit minimumReleaseAge

bugSomething isn't workingSomething isn't working

Status: Open.

#3995 In semgrep/semgrep-rules;

· janderssonse opened on Jul 9, 2026

uv-missing-dependency-cooldown fails on config that should pass

bugSomething isn't workingSomething isn't working

Status: Open.

#3993 In semgrep/semgrep-rules;

· jceresini opened on Jul 8, 2026

[Rule] Unsafe ML model deserialization (torch.load/joblib/dill/numpy allow_pickle) — CWE-502

Status: Open.

#3990 In semgrep/semgrep-rules;

· DipesThapa opened on Jul 6, 2026

no-replaceall is outdated

bugSomething isn't workingSomething isn't working

Status: Open.

#3984 In semgrep/semgrep-rules;

· Sjord opened on Jun 29, 2026

[Rule Request] TypeScript rules for mcp-command-injection and mcp-ssrf

Status: Open.

#3873 In semgrep/semgrep-rules;

· Lonkins opened on Jun 7, 2026

FP and FNs for documentbuilderfactory-disallow-doctype-decl-missing:

bugSomething isn't workingSomething isn't working

Status: Open.

#3831 In semgrep/semgrep-rules;

· sarr424 opened on Apr 28, 2026

Proposal: Improve Semgrep Go SQL Injection Detection for query.Get(...) to GORM Raw(...) Flows

Status: Open.

#3826 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026

Proposal: Improve Semgrep Go Path Traversal Detection for Archive- and Request-Bound Paths

Status: Open.

#3825 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026

Proposal: Improve Semgrep JavaScript Command Injection Detection for Parameter-Derived exec(...) Commands

Status: Open.

#3824 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026

Proposal: Improve Semgrep Python Path Traversal Detection for Upload-, Request-, and Parameter-Derived Paths

Status: Open.

#3823 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026

Proposal: Improve Semgrep Java Open Redirect Detection for Helper-Returned Redirect Targets

Status: Open.

#3822 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026