  function payload (n) {
    var ret = ""
    for (var i = 0; i < n; i++) {
      ret += " "
    }
    return ret
    }
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.