Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
apache
/
commons-bcel
Public
Notifications
You must be signed in to change notification settings
Fork
135
Star
273
Code
Pull requests
7
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Actions: apache/commons-bcel
Actions
All workflows
Workflows
CodeQL
CodeQL
Copilot
Copilot
Dependabot Updates
Dependabot Updates
Dependency Review
Dependency Review
Java CI
Java CI
Scorecards supply-chain security
Scorecards supply-chain security
Show more workflows...
Management
Caches
CodeQL
CodeQL
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
codeql-analysis.yml
will be ignored since log searching is not yet available
490 workflow runs
490 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Javadoc
CodeQL
#2205:
Commit
a6d4655
pushed by
garydgregory
2m 33s
master
master
2m 33s
View workflow file
Sort members
CodeQL
#2204:
Commit
279ec23
pushed by
garydgregory
2m 11s
master
master
2m 11s
View workflow file
Utility.JavaReader escape decoding: OOB table index, bad-hex crash,
CodeQL
#2203:
Commit
bdaca41
pushed by
garydgregory
2m 11s
master
master
2m 11s
View workflow file
Static WIDE ThreadLocal survives exceptions, corrupting the next class's
CodeQL
#2202:
Commit
972dfb6
pushed by
garydgregory
2m 9s
master
master
2m 9s
View workflow file
org.apache.bcel.verifier.VerifierFactory.DEFAULT_MAX_CACHE_SIZE doesn't
CodeQL
#2201:
Commit
4a4b757
pushed by
garydgregory
2m 13s
master
master
2m 13s
View workflow file
Verifier pass 3a delayed checks are quadratic in attribute and code size
CodeQL
#2200:
Commit
b0c3e6a
pushed by
garydgregory
2m 3s
master
master
2m 3s
View workflow file
BCELifier interpolates attacker class/package names into generated Java
CodeQL
#2199:
Commit
7fe2940
pushed by
garydgregory
2m 4s
master
master
2m 4s
View workflow file
Utility.decode fixed 3x buffer breaks the encode/decode round trip and
CodeQL
#2198:
Commit
53c52fa
pushed by
garydgregory
2m 6s
master
master
2m 6s
View workflow file
Signature.matchGJIdent recurses unboundedly on nested generic signatures
CodeQL
#2197:
Commit
ae0a0c5
pushed by
garydgregory
2m 30s
master
master
2m 30s
View workflow file
PMG attribute ignores declared length, enabling BCEL-vs-JVM parse
CodeQL
#2196:
Commit
2c8e5fa
pushed by
garydgregory
2m 23s
master
master
2m 23s
View workflow file
ClassPath.getBytes() sizes its buffer from the forged ZIP
CodeQL
#2195:
Commit
135b392
pushed by
garydgregory
2m 33s
master
master
2m 33s
View workflow file
Class2HTML builds output file paths from the unvalidated class name
CodeQL
#2194:
Commit
1d7760f
pushed by
garydgregory
2m 31s
master
master
2m 31s
View workflow file
Class2HTML emitters write attacker class-file strings into HTML
CodeQL
#2193:
Commit
fb72c22
pushed by
garydgregory
2m 14s
master
master
2m 14s
View workflow file
Silent u2/u1 count truncation across dump paths corrupts emitted
CodeQL
#2192:
Commit
512a70b
pushed by
garydgregory
2m 5s
master
master
2m 5s
View workflow file
Repositories cache classes under the input-defined this_class name;
CodeQL
#2191:
Commit
14890bf
pushed by
garydgregory
2m 4s
master
master
2m 4s
View workflow file
f011: typeSignatureToString recurses per generic-nesting level,
CodeQL
#2190:
Commit
262ad94
pushed by
garydgregory
2m 29s
master
master
2m 29s
View workflow file
ConstantPool.constantToString recurses forever on self-referencing
CodeQL
#2189:
Commit
04f1eae
pushed by
garydgregory
2m 23s
master
master
2m 23s
View workflow file
Disassembler and Class2HTML re-implement the unchecked switch-table
CodeQL
#2188:
Commit
e60d2af
pushed by
garydgregory
2m 34s
master
master
2m 34s
View workflow file
Subroutines.noRecursiveCalls enumerates exponentially many JSR call
CodeQL
#2187:
Commit
3843460
pushed by
garydgregory
2m 21s
master
master
2m 21s
View workflow file
Cubic handlers × range × subroutines scan in Subroutines constructor
CodeQL
#2186:
Commit
3c8957a
pushed by
garydgregory
2m 24s
master
master
2m 24s
View workflow file
Pass 3b dataflow stores frames per instruction and clones ever-growing
CodeQL
#2185:
Commit
3cdf5d1
pushed by
garydgregory
2m 10s
master
master
2m 10s
View workflow file
JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k
CodeQL
#2184:
Commit
2970b4c
pushed by
garydgregory
4m 37s
master
master
4m 37s
View workflow file
JustIce Pass 2 hangs on cyclic superclass chain of a referenced
CodeQL
#2183:
Commit
dc3e898
pushed by
garydgregory
9m 56s
master
master
9m 56s
View workflow file
Opcodes tableswitch and lookupswitch add boundary checks (f003).
CodeQL
#2182:
Commit
49a8bcb
pushed by
garydgregory
12m 8s
master
master
12m 8s
View workflow file
Nested annotation element values recurse unboundedly;
CodeQL
#2181:
Commit
ad48367
pushed by
garydgregory
14m 44s
master
master
14m 44s
View workflow file
Previous
1
2
3
4
5
…
19
20
Next
You can’t perform that action at this time.