Could not resolve module semmle.code.java.security.UnsafeDeserialization

[kejaly]

Excute me , i have a problem when i use the CWE-502/UnsafeDeserialization.ql sample code:Could not resolve module semmle.code.java.security.UnsafeDeserialization

and i use the "material Icon Theme" plugin which showes a lock on the security folder：

anybody can help me ?😢

[smowton]

The current version of the query imports semmle.code.java.security.UnsafeDeserializationQuery not semmle.code.java.security.UnsafeDeserialization; have you perhaps copied the .ql file while the .qll file it tries to import has been updated by Git?

[kejaly]

oh ,thanks . i solve the question by change semmle.code.java.security.UnsafeDeserializationQuery to semmle.code.java.security.UnsafeDeserialization.And i havn't copied .

[RasmusWL]

I noticed that they linked URL is using the master branch (deprecated) and not the main branch (the new one).

So if you use https://github.com/github/codeql/blob/main/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.ql instead, that should solve your problem