their projects and choose tools that may help them evaluate and avoid known
language vulnerabilities. The vulnerabilities to be identified in the TR will be
derived from various non-ISO efforts underway to identify and categorize
vulnerabilities and other forms of weaknesses, including the MITRE CWE.