PUBLIC int espLoadApp(HttpRoute *route)
{
#if !ME_STATIC
    EspRoute    *eroute;
    eroute = route->eroute;
    if (!eroute->skipApps) {
        MprJson     *preload, *item;
        cchar       *errMsg, *source;
        char        *kind;
        int         i;

        /*
            Note: the config parser pauses GC, so this will never yield
         */
        if (!loadApp(route, NULL)) {
            return MPR_ERR_CANT_LOAD;
        }
        if (!route->combine && (preload = mprGetJsonObj(route->config, "esp.preload")) != 0) {
            for (ITERATE_JSON(preload, item, i)) {
                source = stok(sclone(item->value), ":", &kind);
                if (!kind) kind = "controller";
                source = mprJoinPath(httpGetDir(route, "controllers"), source);
                if (espLoadModule(route, NULL, kind, source, &errMsg) < 0) {
                    mprLog("error esp", 0, "Cannot preload esp module %s. %s", source, errMsg);
                    return MPR_ERR_CANT_LOAD;
                }
            }
        }
    }
#endif
    return 0;
}
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.