Mapping refers to "weakness" now instead of "cwe", together with an associated type