      strategy._oauth2.getOAuthAccessToken = function(code, options, callback) {
        return callback(null, undefined, undefined, undefined);
      }
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.