CWE,Sink identifier,Label CWE‑089,sql-injection,SQL injection CWE‑022,path-injection,Path injection CWE‑094,bean-validation,Code injection CWE‑918,request-forgery,Request Forgery CWE‑079,html-injection js-injection,Cross-site scripting CWE‑090,ldap-injection,LDAP injection