NIST's Vuln Database Downshifts, Prompting Questions About Its Future

Since February, NIST's National Vulnerability Database (NVD) has been publishing many CVE entries without the usual metadata, creating gaps that hinder enterprise vulnerability management and patching; industry voices worry this freeze increases exposure windows for attackers and have pointed to vendor and open-source alternatives (e.g., Tenable, VulnCheck NVD++, OSV) and calls for a consortium to fill the gap.