https://jerrygamblin.com/2022/11/16/nvd-cve-analysis-timing/