"This concern has become urgent following an April 15, 2025 letter from MITRE notifying the CVE board that the US government does not intend to renew its contract for managing the program. While we had hoped this day would not come, we have been preparing for this possibility."