Skip to content

Remove prohibited CWE-730 tag from queries - #22862

Draft
jketema wants to merge 1 commit into
mainfrom
remove-cwe-730
Draft

jketema wants to merge 1 commit into
mainfrom
remove-cwe-730

Conversation

@jketema

@jketema jketema commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Fixes #22318.

MITRE marks CWE-730 as a prohibited category for vulnerability mapping. This removes the external/cwe/cwe-730 tag from all 19 queries (C#, Java, JavaScript, Python, Ruby, Swift) and adds minorAnalysis change notes. Other CWE tags are retained; query paths are unchanged.

MITRE marks CWE-730 as PROHIBITED for mapping real-world vulnerabilities.
Remove the external/cwe/cwe-730 tag from all queries and add change notes.
Query paths and suite expectations are unchanged.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CodeQL maps CWE-730, which MITRE prohibits from being used for mapping

1 participant