Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
90 workflow runs
90 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
CodeQL CodeQL #90: Scheduled
17m 29s master
master
17m 29s
Fix Device Code session propagation and OIDC claims CodeQL #89: Pull request #1108 opened by dairoca90
15m 33s dairoca90:debug-16.1.2
dairoca90:debug-16.1.2
15m 33s
GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap reso… CodeQL #88: Commit d937e56 pushed by vharseko
1h 34m 17s master
master
1h 34m 17s
GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap resolution CodeQL #87: Pull request #1106 opened by dependabot Bot
26m 43s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.1
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.1
26m 43s
[#1103] Add upgrade step syncing missing ScriptingService sub-configu… CodeQL #86: Commit 7fb46c2 pushed by vharseko
28m 0s master
master
28m 0s
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text … CodeQL #85: Commit c5dd05f pushed by vharseko
25s master
master
25s
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations CodeQL #84: Pull request #1104 synchronize by vharseko
13m 32s vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
13m 32s
CodeQL CodeQL #83: Scheduled
18m 21s master
master
18m 21s
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text elements CodeQL #82: Pull request #1105 opened by dependabot Bot
14m 10s dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.1
dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.1
14m 10s
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations CodeQL #81: Pull request #1104 synchronize by vharseko
14m 49s vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
14m 49s
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations CodeQL #80: Pull request #1104 opened by vharseko
43m 45s vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
43m 45s
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU… CodeQL #79: Commit 958688e pushed by vharseko
28m 58s master
master
28m 58s
CVE-2026-13149 CVE-2026-14257 CVE-2026-69152 brace-expansion: DoS via… CodeQL #78: Commit 0db1bda pushed by vharseko
26s master
master
26s
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash au… CodeQL #77: Commit 3ec2f5a pushed by vharseko
39s master
master
39s
Update org.openidentityplatform.opendj to 5.2.0-SNAPSHOT CodeQL #76: Pull request #1102 opened by vharseko
26m 17s vharseko:vharseko-patch-2
vharseko:vharseko-patch-2
26m 17s
Bump brace-expansion from 1.1.12 to 1.1.18 in /openam-ui/openam-ui-api CodeQL #75: Pull request #1101 opened by dependabot Bot
1h 50m 32s dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.18
dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.18
1h 50m 32s
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption CodeQL #74: Pull request #1100 opened by vharseko
2h 47m 0s vharseko:fix/cve-2026-59869-js-yaml-api
vharseko:fix/cve-2026-59869-js-yaml-api
2h 47m 0s
CVE-2026-13149 CVE-2026-14257 CVE-2026-69152 brace-expansion: DoS via unbounded expansion CodeQL #73: Pull request #1099 opened by vharseko
1h 37m 51s vharseko:fix/cve-2026-13149-brace-expansion
vharseko:fix/cve-2026-13149-brace-expansion
1h 37m 51s
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer CodeQL #72: Pull request #1098 opened by vharseko
2h 48m 6s vharseko:fix/cve-2026-18446-fast-uri
vharseko:fix/cve-2026-18446-fast-uri
2h 48m 6s
Bump fast-uri from 3.1.4 to 3.1.5 in /openam-ui/openam-ui-ria CodeQL #71: Pull request #1097 opened by dependabot Bot
1h 20m 35s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.5
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.5
1h 20m 35s
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer CodeQL #70: Pull request #1096 opened by dependabot Bot
1h 1m 44s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.5
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.5
1h 1m 44s
CVE-2026-69185 CVE-2026-33151 Socket.IO: Zero-attachment Memory Exhau… CodeQL #69: Commit 293a589 pushed by vharseko
2h 40m 43s master
master
2h 40m 43s
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiat… CodeQL #68: Commit 0594405 pushed by vharseko
54m 24s master
master
54m 24s
[#1080] OAuth2 consent: accept the resource owner's session id as the… CodeQL #67: Commit 7c3aa34 pushed by vharseko
30s master
master
30s
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc) CodeQL #66: Pull request #1088 synchronize by BarakSrour
1h 59m 48s BarakSrour:harden/authxmlrequest-setprincipal-reflection
BarakSrour:harden/authxmlrequest-setprincipal-reflection
1h 59m 48s