Curated security research, vulnerabilities, advisories and tools for practitioners.

#codeql

Security coverage tagged codeql.

1.

Open-source security testing: the Bug Bounty guide to code analysis

blog | 2026-03-17 08:10 | yeswehack.com | original ↗ | #bug-bounty | #open-source | #fuzzing

2.

Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis

blog | 2025-12-11 12:00 | blog.trailofbits.com | original ↗ | #appsec | #vulnerability-research | #security-research

3.

Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case study

blog | 2025-09-25 11:00 | blog.trailofbits.com | original ↗ | #c | #openvpn | #static-analysis

4.

Don’t recurse on untrusted input

blog | 2025-02-21 05:00 | blog.trailofbits.com | original ↗ | #java | #vulnerability-disclosure | #codeql

5.

Finding Bugs in Chrome with CodeQL

blog | 2024-11-21 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #chrome | #static-analysis

6.

Offensive Security with Large Language Models (2)

research | 2024-09-30 09:00 | theori.io | original ↗ | #ai-security | #prompt-injection | #offensive-security

7.

Streamline your static analysis triage with SARIF Explorer

blog | 2024-03-20 13:30 | blog.trailofbits.com | original ↗ | #triage | #static-analysis | #tool-release

8.

Catching OpenSSL misuse using CodeQL

blog | 2023-12-22 14:00 | blog.trailofbits.com | original ↗ | #appsec | #cryptography | #c

9.

Say hello to the next chapter of the Testing Handbook!

blog | 2023-12-11 13:30 | blog.trailofbits.com | original ↗ | #ci-cd | #sast | #static-analysis

10.

Publishing Trail of Bits’ CodeQL queries

blog | 2023-12-06 13:30 | blog.trailofbits.com | original ↗ | #cryptography | #c | #go

11.

Finding unhandled errors using CodeQL

blog | 2022-01-11 12:00 | CVE-2018-1002105 | blog.trailofbits.com | original ↗ | #vulnerability-research | #kubernetes | #static-analysis

12.

Detecting Iterator Invalidation with CodeQL

blog | 2020-10-09 12:30 | blog.trailofbits.com | original ↗ | #vulnerability-research | #vulnerabilities | #static-analysis