CVE-ID Syntax Change