diff --git a/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql b/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql index 7d2513d25e33..f321fc37c284 100644 --- a/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql +++ b/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql @@ -9,6 +9,8 @@ * @precision medium * @id cpp/uncontrolled-process-operation * @tags security + * external/cwe/cwe-073 + * external/cwe/cwe-078 * external/cwe/cwe-114 */ diff --git a/cpp/ql/src/change-notes/2026-07-09-CWE-114.md b/cpp/ql/src/change-notes/2026-07-09-CWE-114.md new file mode 100644 index 000000000000..f766678232ef --- /dev/null +++ b/cpp/ql/src/change-notes/2026-07-09-CWE-114.md @@ -0,0 +1,4 @@ +--- +category: queryMetadata +--- +* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`. diff --git a/csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql b/csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql index 9cd6fc68b4ce..a17e23fc37d6 100644 --- a/csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql +++ b/csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql @@ -9,6 +9,7 @@ * @security-severity 8.2 * @precision high * @tags security + * external/cwe/cwe-073 * external/cwe/cwe-114 */ diff --git a/csharp/ql/src/change-notes/2026-07-09-CWE-114.md b/csharp/ql/src/change-notes/2026-07-09-CWE-114.md new file mode 100644 index 000000000000..928a4cc497aa --- /dev/null +++ b/csharp/ql/src/change-notes/2026-07-09-CWE-114.md @@ -0,0 +1,4 @@ +--- +category: queryMetadata +--- +* Added the tag `external/cwe/cwe-073` to `cs/assembly-path-injection`. diff --git a/csharp/ql/src/change-notes/released/2022-11-07-constant-expression.md b/csharp/ql/src/change-notes/released/2022-11-07-constant-expression.md deleted file mode 100644 index 9e2d667d2ebb..000000000000 --- a/csharp/ql/src/change-notes/released/2022-11-07-constant-expression.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `Constant Condition` query was extended to catch cases when `String.IsNullOrEmpty` returns a constant value. \ No newline at end of file