Under a new model announced by the National Institute of Standards and Technology, NVD will no longer enrich every CVE.