Merge pull request #22149 from jketema/jketema/cwe-114-tag

jketema · web-flow · commit 161c8c4d30fa · 2026-07-09T18:02:21.000+02:00
C++/C#: Specify additional CWE tags for queries that specify CWE 114
diff --git a/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql b/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql
@@ -9,6 +9,8 @@
  * @precision medium
  * @id cpp/uncontrolled-process-operation
  * @tags security
+ *       external/cwe/cwe-073
+ *       external/cwe/cwe-078
  *       external/cwe/cwe-114
  */
 
diff --git a/cpp/ql/src/change-notes/2026-07-09-CWE-114.md b/cpp/ql/src/change-notes/2026-07-09-CWE-114.md
@@ -0,0 +1,4 @@
+---
+category: queryMetadata
+---
+* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`.
diff --git a/csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql b/csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql
@@ -9,6 +9,7 @@
  * @security-severity 8.2
  * @precision high
  * @tags security
+ *       external/cwe/cwe-073
  *       external/cwe/cwe-114
  */
 
diff --git a/csharp/ql/src/change-notes/2026-07-09-CWE-114.md b/csharp/ql/src/change-notes/2026-07-09-CWE-114.md
@@ -0,0 +1,4 @@
+---
+category: queryMetadata
+---
+* Added the tag `external/cwe/cwe-073` to `cs/assembly-path-injection`.
diff --git a/csharp/ql/src/change-notes/released/2022-11-07-constant-expression.md b/csharp/ql/src/change-notes/released/2022-11-07-constant-expression.md

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: queryMetadata
 +---
 +* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`.