This is your periodic🎗️ that — if you are a cybersecurity professional — you must immediately divest from Infragard, cease sharing cyber threat intelligence w/any agent/agency of the federal gov, and — now — migrate your vulnerability management to non-U.S.-led and "supported" standards (i.e., abandon CVE for GCVE https://gcve.eu/ and/or EUVD https://euvd.enisa.europa.eu/homepage).
It is UNWISE AT BEST to place any critical cybersecurity process on U.S. run, or U.S.-centric cyber initiatives.