Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
220 workflow runs
220 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
CVE-2026-75140 jsoup: Memory exhaustion in XmlTreeBuilder via deeply nested namespace declarations (1.23.1 -> 1.23.2) CodeQL #220: Pull request #1169 opened by dependabot Bot
1h 44m 27s dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.2
dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.2
1h 44m 27s
CVE-2026-93749 source-map-js: Event-loop DoS via unvalidated indexed source-map section offsets (1.2.1 -> 1.2.2) CodeQL #219: Pull request #1168 opened by dependabot Bot
1h 37m 34s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/source-map-js-1.2.2
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/source-map-js-1.2.2
1h 37m 34s
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stack-exhaustion and quadratic-time DoS in brace parsing (1.1.18 -> 1.1.21) CodeQL #218: Pull request #1167 opened by dependabot Bot
1h 26m 49s dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.21
dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.21
1h 26m 49s
CVE-2026-106449 CVE-2026-106450 CVE-2026-106451 CVE-2026-106452 CVE-2026-106453 at.yawk.lz4:lz4-java: Decompression DoS and native-library hijack via shared tmpdir (1.11.1 -> 1.11.4) CodeQL #217: Pull request #1166 opened by dependabot Bot
1h 59m 59s dependabot/maven/openam-cassandra/at.yawk.lz4-lz4-java-1.11.4
dependabot/maven/openam-cassandra/at.yawk.lz4-lz4-java-1.11.4
1h 59m 59s
Fix Maven Central release: pin Maven 3.9.16, bump central-publishing … CodeQL #216: Commit 0f5b137 pushed by vharseko
1h 51m 17s master
master
1h 51m 17s
Update Java version to 27 in build.yml (#1163) CodeQL #215: Commit 2079709 pushed by vharseko
34s master
master
34s
Remove duplicate testng dependency from openam-core POM (#1164) CodeQL #214: Commit 73e953d pushed by vharseko
1m 8s master
master
1m 8s
Fix Maven Central release: pin Maven 3.9.16, bump central-publishing to 0.11.0 CodeQL #213: Pull request #1165 opened by vharseko
45m 42s vharseko:release-pin-maven-3.9
vharseko:release-pin-maven-3.9
45m 42s
Update Java version to 27 in build.yml CodeQL #212: Pull request #1163 synchronize by vharseko
9m 8s vharseko-patch-1
vharseko-patch-1
9m 8s
Remove duplicate testng dependency from openam-core POM CodeQL #211: Pull request #1164 opened by vharseko
6m 35s vharseko:fix/openam-core-duplicate-testng
vharseko:fix/openam-core-duplicate-testng
6m 35s
Update Java version to 27 in build.yml CodeQL #210: Pull request #1163 opened by vharseko
8m 53s vharseko-patch-1
vharseko-patch-1
8m 53s
CodeQL CodeQL #209: Scheduled
12m 25s master
master
12m 25s
[#1160] [#1162] Allow unescaped '=' and non-leading '#' in LDAPUtils … CodeQL #208: Commit aaa3c25 pushed by vharseko
1h 32m 35s master
master
1h 32m 35s
[#1160] [#1162] Allow unescaped '=' and non-leading '#' in LDAPUtils dnRule attribute values CodeQL #207: Pull request #1161 synchronize by vharseko
4h 5m 27s nicholascowan:fix/ldaputils-dn-allow-equals-in-values
nicholascowan:fix/ldaputils-dn-allow-equals-in-values
4h 5m 27s
[#1160] [#1162] Allow unescaped '=' and non-leading '#' in LDAPUtils dnRule attribute values CodeQL #206: Pull request #1161 synchronize by vharseko
25m 6s nicholascowan:fix/ldaputils-dn-allow-equals-in-values
nicholascowan:fix/ldaputils-dn-allow-equals-in-values
25m 6s
[#1160] [#1162] Allow unescaped '=' and non-leading '#' in LDAPUtils dnRule attribute values CodeQL #205: Pull request #1161 opened by nicholascowan
10m 18s nicholascowan:fix/ldaputils-dn-allow-equals-in-values
nicholascowan:fix/ldaputils-dn-allow-equals-in-values
10m 18s
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stac… CodeQL #204: Commit d371abc pushed by vharseko
1h 53m 46s master
master
1h 53m 46s
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stack-exhaustion and quadratic-time DoS in brace parsing (5.0.9 -> 5.0.12) CodeQL #203: Pull request #1159 opened by dependabot Bot
1h 29m 56s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/brace-expansion-5.0.12
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/brace-expansion-5.0.12
1h 29m 56s
Keep vendored and generated code out of CodeQL (#1152) CodeQL #202: Commit 5812b46 pushed by vharseko
17m 57s master
master
17m 57s
[#1155] Fix typos, unresolved placeholders and dead ForgeRock links i… CodeQL #201: Commit c9bf539 pushed by vharseko
23m 2s master
master
23m 2s
Keep vendored and generated code out of CodeQL CodeQL #200: Pull request #1152 synchronize by vharseko
1h 3m 37s vharseko:codeql-exclude-vendored-js
vharseko:codeql-exclude-vendored-js
1h 3m 37s
[#1154] Replace legacy ForgeRock relative links in the guides with An… CodeQL #199: Commit a9516e8 pushed by vharseko
32m 11s master
master
32m 11s
[#1154] Replace legacy ForgeRock relative links in the guides with Antora xrefs CodeQL #198: Pull request #1158 opened by vharseko
2h 50m 42s vharseko:issue-1154-legacy-links
vharseko:issue-1154-legacy-links
2h 50m 42s
[#1155] Fix typos, unresolved placeholders and dead ForgeRock links in the guides CodeQL #197: Pull request #1157 opened by vharseko
2h 46m 50s vharseko:issue-1155-docs-fixes
vharseko:issue-1155-docs-fixes
2h 46m 50s
Tomcat 10.1.59: CVE-2026-41293 CVE-2026-43512 CVE-2026-43515 CVE-2026… CodeQL #196: Commit 2771241 pushed by vharseko
55m 18s master
master
55m 18s