              invitationToken: uuid.v4(),
              defaultOrganizationId: organizationId,
            })
          );
        }
        user = existingUser;
      }

      for (const group of groups) {
        const orgGroupPermission = await manager.findOne(GroupPermission, {
          where: {
            organizationId: organizationId,
            group: group,
          },
        });

        if (orgGroupPermission) {
          const userGroupPermission = manager.create(UserGroupPermission, {
            groupPermissionId: orgGroupPermission.id,
            userId: user.id,
          });
          await manager.save(userGroupPermission);
        } else {
          throw new BadRequestException(`${group} group does not exist for current organization`);
        }
      }
    });
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.