See: #3199 (comment)

Idea from @cpholguera

Idea: maybe we could also build a glossary for these and other terms.

See:

• https://cwe.mitre.org/documents/glossary/index.html#Insufficient
• https://csrc.nist.gov/glossary