static MprJson *queryLeaf(MprJson *obj, cchar *property, MprJson *value, int flags)
{
    MprJson     *child;

    assert(obj);
    assert(property && *property);

    if (value) {
        setProperty(obj, sclone(property), value);
        return 0;

    } else if (flags & MPR_JSON_REMOVE) {
        if ((child = mprLookupJsonObj(obj, property)) != 0) {
            return mprRemoveJsonChild(obj, child);
        }
        return 0;

    } else {
        return mprCloneJson(mprLookupJsonObj(obj, property));
    }   
}
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.