https://www.jerrygamblin.com/2022/11/16/nvd-cve-analysis-timing/