All issues

Search results

Windows Defender flags an intentional reverse-shell test fixture when consuming semgrep-rules on Windows

Status: Open.

#4030 In semgrep/semgrep-rules;

· rapointofit opened on Jul 28, 2026

False positive for java.lang.correctness.eqeq.eqeq

bugSomething isn't workingSomething isn't working

Status: Open.

#4019 In semgrep/semgrep-rules;

· Sjord opened on Jul 27, 2026

Incorrect suggestion for renovate-missing-minimum-release-age rule

bugSomething isn't workingSomething isn't working

Status: Open.

#4018 In semgrep/semgrep-rules;

· eliashaeussler opened on Jul 27, 2026

GitHub Actions curl rules parse explicit PowerShell steps as Bash

Status: Open.

#4001 In semgrep/semgrep-rules;

· meza opened on Jul 12, 2026

renovate-missing-minimum-release-age flags packageRules that inherit minimumReleaseAge

bugSomething isn't workingSomething isn't working

Status: Open.

#3995 In semgrep/semgrep-rules;

· janderssonse opened on Jul 9, 2026

uv-missing-dependency-cooldown fails on config that should pass

bugSomething isn't workingSomething isn't working

Status: Open.

#3993 In semgrep/semgrep-rules;

· jceresini opened on Jul 8, 2026

[Rule] Unsafe ML model deserialization (torch.load/joblib/dill/numpy allow_pickle) — CWE-502

Status: Open.

#3990 In semgrep/semgrep-rules;

· DipesThapa opened on Jul 6, 2026

no-replaceall is outdated

bugSomething isn't workingSomething isn't working

Status: Open.

#3984 In semgrep/semgrep-rules;

· Sjord opened on Jun 29, 2026

[Rule Request] TypeScript rules for mcp-command-injection and mcp-ssrf

Status: Open.

#3873 In semgrep/semgrep-rules;

· Lonkins opened on Jun 7, 2026

FP and FNs for documentbuilderfactory-disallow-doctype-decl-missing:

bugSomething isn't workingSomething isn't working

Status: Open.

#3831 In semgrep/semgrep-rules;

· sarr424 opened on Apr 28, 2026

Proposal: Improve Semgrep Go SQL Injection Detection for query.Get(...) to GORM Raw(...) Flows

Status: Open.

#3826 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026

Proposal: Improve Semgrep Go Path Traversal Detection for Archive- and Request-Bound Paths

Status: Open.

#3825 In semgrep/semgrep-rules;

· FORIMOC opened on Apr 27, 2026