CWE Reference

CWE Data Downloads

Versioned CWE R2 artifact paths, source mirroring conventions, release manifests, and normalized JSON download references.

Release starter-2026-05downloads

Search CWE CWE Dictionary

Raw Data Downloads

Versioned CWE artifacts

Official-source artifacts are mirrored under the existing R2 bucket with the `cwe/` prefix. Operators can mirror locally with npm run backfill:cwe -- mirror and trigger production sync with npm run backfill:cwe -- trigger.

cwe/releases/starter-2026-05/source/cwec_latest.xml.zip
cwe/releases/starter-2026-05/source/cwec.xml
cwe/releases/starter-2026-05/normalized/catalog.json
cwe/manifests/starter-2026-05.json