Wrong CWE list in X01:2025 (copied from A06)

[okdt]

Problem

In X01_2025-Next_Steps.md, the X01:2025 Lack of Application Resilience
section
contains an incorrect "List of Mapped CWEs".

Evidence

1. Background section (line 12) mentions relevant CWEs as:

   • CWE-400 Uncontrolled Resource Consumption
   • CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
   • CWE-674 Uncontrolled Recursion
   • CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

2. Score table (lines 18-59) states "CWEs Mapped: 16"

3. List of Mapped CWEs section (lines 110-149) contains 39 entries:

   • None of which include CWE-400, 409, 674, or 835
   • The 39 CWEs listed are identical to A06:2025 Insecure Design's CWE
     list

Root Cause (suspected)

The CWE list for X01:2025 appears to have been accidentally copied from A06_2025-Insecure_Design.md during document preparation.

Expected

The X01:2025 CWE list should:

• Match the count in the score table (16)
• Include the CWEs mentioned in the Background section (400, 409, 674, 835)
• Contain resilience-related CWEs appropriate for this category

Files affected

• 2025/docs/en/X01_2025-Next_Steps.md
• Section: X01:2025 Lack of Application Resilience
• Lines: 110-149 (List of Mapped CWEs)

[Satish11012007]

Hello maintainers,
I’d like to take this issue if it’s still available. I can fix the CWE list so it matches the background section and the count mentioned in the score table.

Please let me know. Thanks!

[Satish11012007]

Thanks for the update. I see a PR is already open for this issue.
I’m happy to help with reviews or follow-up fixes if needed.