CVE program faces swift end after DHS fails to renew contract

Re:CVE program faces swift end after DHS fails to renew cont... by cma on Wednesday April 16, 2025 @12:39AM (#43701532)

Can search these for the links

2023

> CISA had previously been supporting the NIST NVD program with approximately $3.7 million per year in interagency funding, which they have discontinued

2024

> While NIST has since reallocated $8.5 million to NVD for fiscal years 2024 and 2025

Assuming that's spread over both years it wasn't as big of an increase as I said, but is still an increase even inflation adjusted.

> 2025 article claims 30% increase in 2024 workload

Underfunding in the face of more workload isn't itself a funding cut.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by transpute on Wednesday April 16, 2025 @01:38AM (#43701854)

Thanks for the pointer. Is this a lobbying org? https://www.fdd.org/analysis/policy_briefs/2025/03/21/delaye...

> While NIST has since reallocated $8.5 million to NVD for fiscal years 2024 and 2025, this funding remains a fraction of the $300 million to $400 million estimated to be needed annually to fully restore capacity, with an additional $120 million to $150 million required to prevent further system “deterioration.”

Did NVD receive 300MM annual funding pre-2024? That would be a 98% funding cut.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by formerly_proven on Wednesday April 16, 2025 @03:03AM (#43702347)

300 million would’ve been a quarter of the NIST budget. Doubt.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by transpute on Wednesday April 16, 2025 @03:24AM (#43702484)

Yeah, bizarre site.

MITRE CVE/CWE budget is more transparent than NVD since it's a contract, listed on USAspending.gov.

[ Parent | on HN ]