Language: Go
Label: vulnerable
CWE: NVD-CWE-Other \u2014 Other
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.

Code:
	eg.Go(func() error {
		var err error
		policyOutput, err = policyEvaluator.Evaluate(ectx, &PolicyRequest{
			HTTP:                     req.HTTP,
			Session:                  req.Session,
			IsValidClientCertificate: isValidClientCertificate,
		})
		return err
	})