Language: Go
Label: safe
CWE: NVD-CWE-Other \u2014 Other
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.

Code:
func (b *Builder) buildPomeriumAuthenticateHTTPRoutes(
	options *config.Options,
	host string,
	requireStrictTransportSecurity bool,
) ([]*envoy_config_route_v3.Route, error) {
	if !config.IsAuthenticate(options.Services) {
		return nil, nil
	}

	for _, fn := range []func() (*url.URL, error){
		options.GetAuthenticateURL,
		options.GetInternalAuthenticateURL,
	} {
		u, err := fn()
		if err != nil {
			return nil, err
		}
		if urlMatchesHost(u, host) {
			return []*envoy_config_route_v3.Route{
				b.buildControlPlanePathRoute(options, options.AuthenticateCallbackPath, requireStrictTransportSecurity),
				b.buildControlPlanePathRoute(options, "/", requireStrictTransportSecurity),
			}, nil
		}
	}
	return nil, nil
}