some of the previously released summaries were cumulative
instead of offering a year-by-year breakdown, and (3)
eventually, as a new type of vulnerability is reported more
frequently, the CVE project notices it enough to give it a name,