Search results

False Positive: <code>rust.hyper.ssrf.reqwest-taint.reqwest-taint</code> triggers on macro-expanded std::fmt::format while ignoring equivalent <code>format!</code> macro

Status: Open.

#3746 In semgrep/semgrep-rules;

· rikki322 opened on Jan 20, 2026

Java ProcessBuilder RCE rule misses fluent command() invocation without intermediate variable

bugSomething isn't workingSomething isn't working

Status: Open.

#3743 In semgrep/semgrep-rules;

· h4r7w3l1 opened on Jan 16, 2026

False positives in server-dangerous-object-deserialization

bugSomething isn't workingSomething isn't working

Status: Open.

#3737 In semgrep/semgrep-rules;

· 9iang22 opened on Jan 13, 2026

False positives in heroku API key

bugSomething isn't workingSomething isn't working

Status: Open.

#3733 In semgrep/semgrep-rules;

· directionless opened on Jan 7, 2026

false negatives in the Java rule weak-random

bugSomething isn't workingSomething isn't working

Status: Open.

#3732 In semgrep/semgrep-rules;

· 9iang22 opened on Jan 6, 2026

False positive on php.lang.security.injection.tainted-sql-string.tainted-sql-string

bugSomething isn't workingSomething isn't working

Status: Open.

#3729 In semgrep/semgrep-rules;

· LucianoHanna opened on Dec 25, 2025

Semgrep Rule for Nginx missing-internal.yaml causes Segmentation Fault

bugSomething isn't workingSomething isn't working

Status: Open.

#3726 In semgrep/semgrep-rules;

· bp-gilley-justin opened on Dec 12, 2025

False negative in the expat-xxe detection rule

bugSomething isn't workingSomething isn't working

Status: Open.

#3724 In semgrep/semgrep-rules;

· 9iang22 opened on Dec 9, 2025

exported_loop_pointer for go &gt;= 1.22

bugSomething isn't workingSomething isn't working

Status: Open.

#3712 In semgrep/semgrep-rules;

· loodde opened on Nov 20, 2025

semgrep-rules/javascript/react/correctness/hooks/set-state-no-op.yaml does not correctly account for variable shadowing in {...} destructuring inside a lambda

bugSomething isn't workingSomething isn't working

Status: Open.

#3709 In semgrep/semgrep-rules;

· aaronshim opened on Nov 1, 2025

gosql-sqli rule:ExecContent should be ExecContext

bugSomething isn't workingSomething isn't working

Status: Open.

#3694 In semgrep/semgrep-rules;

· LBxiaobai opened on Sep 19, 2025

Fail to parse with rule <code>yaml.github-actions.security.curl-eval.curl-eval</code>

bugSomething isn't workingSomething isn't working

Status: Open.

#3688 In semgrep/semgrep-rules;

· lahabana opened on Sep 11, 2025