C++: Add CWE 73 and CWE 78 tags to cpp/uncontrolled-process-operation

jketema · jketema · commit 72efb6a0586e · 2026-07-09T17:11:58.000+02:00
User controlled data here either leads to the loading of an uncontrolled
library (CWE 73) or the execution of an uncontrolled command (CWE 78).
diff --git a/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql b/cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql
@@ -9,6 +9,8 @@
  * @precision medium
  * @id cpp/uncontrolled-process-operation
  * @tags security
+ *       external/cwe/cwe-073
+ *       external/cwe/cwe-078
  *       external/cwe/cwe-114
  */
 
diff --git a/cpp/ql/src/change-notes/2026-07-09-CWE-114.md b/cpp/ql/src/change-notes/2026-07-09-CWE-114.md
@@ -0,0 +1,4 @@
+---
+category: queryMetadata
+---
+* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: queryMetadata
 +---
 +* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`.