Live Active security incident? Get immediate response
CWE Reference

CWE Data Downloads

Versioned CWE R2 artifact paths, source mirroring conventions, release manifests, and normalized JSON download references.

Release starter-2026-05downloads

Raw Data Downloads

Versioned CWE artifacts

Official-source artifacts are mirrored under the existing R2 bucket with the `cwe/` prefix. Operators can mirror locally with npm run backfill:cwe -- mirror and trigger production sync with npm run backfill:cwe -- trigger.

  • cwe/releases/starter-2026-05/source/cwec_latest.xml.zip
  • cwe/releases/starter-2026-05/source/cwec.xml
  • cwe/releases/starter-2026-05/normalized/catalog.json
  • cwe/manifests/starter-2026-05.json