A CVE Dispute