And sometimes it’s just impossible to get a CVE number in a reasonable amount of time, or indeed at all.