static void parsePipelineFilters(HttpRoute *route, cchar *key, MprJson *prop)
{
    MprJson     *child;
    cchar       *name, *extensions;
    int         flags, ji;

    for (ITERATE_CONFIG(route, prop, child, ji)) {
        if (child->type & MPR_JSON_STRING) {
            flags = HTTP_STAGE_RX | HTTP_STAGE_TX;
            extensions = 0;
            name = child->value;
        } else {
            name = mprGetJson(child, "name");
            extensions = getList(mprGetJsonObj(child, "extensions"));
#if KEEP
            direction = mprGetJson(child, "direction");
            flags |= smatch(direction, "input") ? HTTP_STAGE_RX : 0;
            flags |= smatch(direction, "output") ? HTTP_STAGE_TX : 0;
            flags |= smatch(direction, "both") ? HTTP_STAGE_RX | HTTP_STAGE_TX : 0;
#else
            flags = HTTP_STAGE_RX | HTTP_STAGE_TX;
#endif
        }
        if (httpAddRouteFilter(route, name, extensions, flags) < 0) {
            httpParseError(route, "Cannot add filter %s", name);
            break;
        }
    }
}
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.