The Gov Defunded the CVE! And Then it Didn't! (It Gets Weirder.)