NewsBite analysis · DevOps, Programming, Security
GitHub Blog
CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection
GitHub has announced the release of CodeQL 2.26.0, which adds support for Kotlin version 2.4.0 and implements advanced detection for AI prompt injection vulnerabilities. This release aims to enhance security in code scanning by improving the static analysis capabilities across multiple programming languages, while also refining existing queries to reduce false positives. As the threat landscape evolves, these new features are essential for developers aiming to secure their applications effectively.
Act nowConfidence: HighImmediate horizon
Published 10 Jul 2026, 20:45 UTC2 min read
Visit original article ↗Lead image — GitHub Blog
Summary
TL;DR
- Added support for Kotlin 2.4.0 in CodeQL
- Introduced AI prompt injection detection for JavaScript and TypeScript
- Improved analysis accuracy across multiple languages
- Enhanced security queries to detect new vulnerabilities
- General reduction in false positives for multiple existing queries
Interesting facts
- The new AI prompt injection queries target vulnerabilities in popular SDKs like OpenAI and Google GenAI
- CodeQL now supports new C# parameters for Razor Page handlers
- Updates also include improvements for Go and Swift security analysis