Glossary

CWE

Common Weakness Enumeration — the taxonomy of software weakness types.

Where a CVE names one specific flaw in one product, a CWE (Common Weakness Enumeration) names the *category* of mistake — CWE-79 is cross-site scripting, CWE-285 is improper authorization, CWE-787 is an out-of-bounds write. CWEs let you see patterns: if your dependencies keep picking up the same weakness class, that is a signal about the code you are building on.

Safeguard Gold classifies every tracked vulnerability by CWE and publishes a browsable CWE index, each class linking to the real CVEs that instantiate it.