shamino

Sounds like a perfect use for blockchain technology.

Migrate the CVE database to a blockchain and encourage multiple entities (tech companies, cloud providers and security-focused non-profits in addition to government agencies) to host mirrors.  There's really no reason something like this should be controlled by a single government-funded organization.  Especially when government programs (of all kinds) can (and always could) be canceled at the drop of a hat.