The announcement comes after concerns that the US government would stop funding the operations of MITRE, the nonprofit behind the CVE database.