Search results

Multicore parallelism silently produces 0 findings on high-vCPU hosts with constrained memory

Status: Open.

#11606 In semgrep/semgrep;

· shruti-amazon opened on Apr 3, 2026

semgrep scan generates findings for ignored code blocks if the --sarif-output option is specified

Status: Open.

#11605 In semgrep/semgrep;

· andreastedile opened on Apr 3, 2026

Incorrect Finding Count & Duplicate Span When Using Variable in Message Template

bugSomething isn't workingSomething isn't working

feature:metavariable

Status: Open.

#11588 In semgrep/semgrep;

· jagprog5 opened on Mar 24, 2026

Add taint propagation support for Python **kwargs

feature:taint

Status: Open.

#11586 In semgrep/semgrep;

· philipcunningham opened on Mar 23, 2026

Support propagators in Track control sources?

Status: Open.

#11584 In semgrep/semgrep;

· icepng opened on Mar 23, 2026

Add lookup by finding URL/issue_ids in semgrep_findings MCP tool

feature:mcpIssues related Semgrep's Model Context Protocol (MCP) serverIssues related Semgrep's Model Context Protocol (MCP) server

Status: Open.

#11580 In semgrep/semgrep;

· craslaw opened on Mar 20, 2026

False positive in terraform when locals variable name exists that matches a resource name

lang:terraform

Status: Open.

Bug

#11571 In semgrep/semgrep;

· JosiahOne opened on Mar 17, 2026

[Win] Semgrep Unix_error on Windows behind corporate proxy

Status: Open.

#11554 In semgrep/semgrep;

· dickyha opened on Mar 6, 2026

Make data structures (de)serializable with bin_prot

enhancementNew feature or requestNew feature or request

Status: Open.

#11552 In semgrep/semgrep;

· Yoric opened on Mar 5, 2026

Syntax errors while parsing Rust code

lang:rust

parsingRequires a fix in a parser, typically a tree-sitter or menhir grammar.Requires a fix in a parser, typically a tree-sitter or menhir grammar.

priority:low

Status: Open.

Bug

#11551 In semgrep/semgrep;

· koolanit opened on Mar 5, 2026

JavaScript taint rule produces weird finding spans for + and - operators

bugSomething isn't workingSomething isn't working

feature:taint

javascriptPull requests that update Javascript codePull requests that update Javascript code

lang:javascript

Status: Open.

#11543 In semgrep/semgrep;

· mschwager opened on Mar 2, 2026

Support FIPS-Compliant Cryptography in Semgrep CLI (hashlib blake2b failure)

bugSomething isn't workingSomething isn't working

cliSemgrep CLISemgrep CLI

exoticfunky stufffunky stuff

pythonPull requests that update python codePull requests that update python code

Status: Open.

#11541 In semgrep/semgrep;

· jerinisready opened on Feb 28, 2026