Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
80 workflow runs
80 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations CodeQL #80: Pull request #1104 opened by vharseko
43m 45s vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
43m 45s
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU… CodeQL #79: Commit 958688e pushed by vharseko
28m 58s master
master
28m 58s
CVE-2026-13149 CVE-2026-14257 CVE-2026-69152 brace-expansion: DoS via… CodeQL #78: Commit 0db1bda pushed by vharseko
26s master
master
26s
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash au… CodeQL #77: Commit 3ec2f5a pushed by vharseko
39s master
master
39s
Update org.openidentityplatform.opendj to 5.2.0-SNAPSHOT CodeQL #76: Pull request #1102 opened by vharseko
26m 17s vharseko:vharseko-patch-2
vharseko:vharseko-patch-2
26m 17s
Bump brace-expansion from 1.1.12 to 1.1.18 in /openam-ui/openam-ui-api CodeQL #75: Pull request #1101 opened by dependabot Bot
1h 50m 32s dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.18
dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.18
1h 50m 32s
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption CodeQL #74: Pull request #1100 opened by vharseko
2h 47m 0s vharseko:fix/cve-2026-59869-js-yaml-api
vharseko:fix/cve-2026-59869-js-yaml-api
2h 47m 0s
CVE-2026-13149 CVE-2026-14257 CVE-2026-69152 brace-expansion: DoS via unbounded expansion CodeQL #73: Pull request #1099 opened by vharseko
1h 37m 51s vharseko:fix/cve-2026-13149-brace-expansion
vharseko:fix/cve-2026-13149-brace-expansion
1h 37m 51s
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer CodeQL #72: Pull request #1098 opened by vharseko
2h 48m 6s vharseko:fix/cve-2026-18446-fast-uri
vharseko:fix/cve-2026-18446-fast-uri
2h 48m 6s
Bump fast-uri from 3.1.4 to 3.1.5 in /openam-ui/openam-ui-ria CodeQL #71: Pull request #1097 opened by dependabot Bot
1h 20m 35s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.5
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.5
1h 20m 35s
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer CodeQL #70: Pull request #1096 opened by dependabot Bot
1h 1m 44s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.5
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.5
1h 1m 44s
CVE-2026-69185 CVE-2026-33151 Socket.IO: Zero-attachment Memory Exhau… CodeQL #69: Commit 293a589 pushed by vharseko
2h 40m 43s master
master
2h 40m 43s
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiat… CodeQL #68: Commit 0594405 pushed by vharseko
54m 24s master
master
54m 24s
[#1080] OAuth2 consent: accept the resource owner's session id as the… CodeQL #67: Commit 7c3aa34 pushed by vharseko
30s master
master
30s
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc) CodeQL #66: Pull request #1088 synchronize by BarakSrour
1h 59m 48s BarakSrour:harden/authxmlrequest-setprincipal-reflection
BarakSrour:harden/authxmlrequest-setprincipal-reflection
1h 59m 48s
CVE-2026-69185 CVE-2026-33151 Socket.IO: Zero-attachment Memory Exhaustion + unbounded number of binary attachments CodeQL #65: Pull request #1095 opened by dependabot Bot
2h 25m 44s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/socket.io-parser-4.2.7
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/socket.io-parser-4.2.7
2h 25m 44s
CodeQL CodeQL #64: Scheduled
18m 16s master
master
18m 16s
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc) CodeQL #63: Pull request #1088 opened by BarakSrour
1h 5m 50s BarakSrour:harden/authxmlrequest-setprincipal-reflection
BarakSrour:harden/authxmlrequest-setprincipal-reflection
1h 5m 50s
[#1082] Fix docs contradicting each other on XUI + HttpOnly session c… CodeQL #62: Commit b4c030a pushed by maximthomas
1h 22m 11s master
master
1h 22m 11s
GHSA-r28c-9q8g-f849 PostCSS: Path Traversal in Previous Source Map Au… CodeQL #61: Commit ba4af5d pushed by vharseko
19m 9s master
master
19m 9s
GHSA-qwww-vcr4-c8h2 React Router: RSC Mode CSRF Bypass Allows Action … CodeQL #60: Commit a6f70a8 pushed by vharseko
39s master
master
39s
GHSA-qwww-vcr4-c8h2 React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response CodeQL #59: Pull request #1087 opened by dependabot Bot
49m 42s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/react-router-8.3.0
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/react-router-8.3.0
49m 42s
GHSA-r28c-9q8g-f849 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure CodeQL #58: Pull request #1086 opened by dependabot Bot
1h 13m 40s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/postcss-8.5.23
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/postcss-8.5.23
1h 13m 40s
CVE-2026-59949 at.yawk.lz4:lz4-java: Native XXHash implementations ca… CodeQL #57: Commit 20fbed2 pushed by vharseko
50m 43s master
master
50m 43s
CVE-2026-59949 at.yawk.lz4:lz4-java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges CodeQL #56: Pull request #1085 opened by dependabot Bot
14m 31s dependabot/maven/openam-cassandra/at.yawk.lz4-lz4-java-1.11.1
dependabot/maven/openam-cassandra/at.yawk.lz4-lz4-java-1.11.1
14m 31s