CodeQL Queries for Insecure JMS Deserialization

August 19, 2020 ยท View on GitHub

This repository contains CodeQL queries to find insecure uses of the API's provided by different JMS implementations.

Introductory blog post: https://blog.silentsignal.eu/2020/08/17/unexpected-deserialization-pt-1-jms/

Contributions are welcome!