static void parseRoutes(HttpRoute *route, cchar *key, MprJson *prop)
{
    MprJson     *child;
    HttpRoute   *newRoute;
    cchar       *pattern;
    int         ji;

    if (route->loaded) {
        mprLog("warn http config", 1, "Skip reloading routes - must reboot if routes are modified");
        return;
    }
    if (prop->type & MPR_JSON_STRING) {
        httpAddRouteSet(route, prop->value);

    } else if (prop->type & MPR_JSON_ARRAY) {
        key = sreplace(key, ".routes", "");
        for (ITERATE_CONFIG(route, prop, child, ji)) {
            if (child->type & MPR_JSON_STRING) {
                httpAddRouteSet(route, child->value);

            } else if (child->type & MPR_JSON_OBJ) {
                newRoute = 0;
                pattern = mprLookupJson(child, "pattern");
                if (pattern) {
                    newRoute = httpLookupRouteByPattern(route->host, pattern);
                    if (!newRoute) {
                        newRoute = httpCreateInheritedRoute(route);
                        httpSetRouteHost(newRoute, route->host);
                    }
                } else {
                    newRoute = route;
                }
                parseAll(newRoute, key, child);
                if (newRoute->error) {
                    break;
                }
                if (pattern) {
                    httpFinalizeRoute(newRoute);
                }
            }
        }
    }
}
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.