I'm generally a blockchain hater, but it seems like distributing/maintaining CVE information via something blockchain-ish would be pretty cool.
Exactly what benefit does "but blockchain!" bring?
What’s in danger is the work required to coordinate such efforts in the future, and rubbing blockchain on it doesn’t help.
(I know you weren’t advocating it, I just get tired of people who don’t understand the amount of effort that goes into “free” content.)