@avoidthehack @hacks4pancakes The NVD has been in a bad way for the last couple of years and it's not going to get better.

I had to spend two days explaining why a bunch of Android vulns from 2018 hit the NVD about two weeks ago. It was one part "Google just got around to sending them to NIST" and one part "NIST finally looked them over and set their status to REVIEWED.

They've been under-funded and under-staffed for years now, and it's coming home to roost.