TechFlow reports that slowmist founder Yu Xian mentioned on social media that assigning a CVE number to the Bitcoin Ordinals inscription, originally a contentious community issue, became significant because the disputing party submitted it to CVE—a highly influential vulnerability platform. NVD (the so-called U.S. government agency) and other vulnerability databases follow CVE numbering, and these standards are widely recognized across the security and broader IT industries.
However, there's an objective fact: a CVE designation does not necessarily mean a vulnerability must or will be fixed, especially for lower-severity vulnerabilities. For example, the Bitcoin Ordinals inscription received a score of 5.3 out of 10—classified as a medium-severity vulnerability. Looking deeper into the scoring details, several impact metrics scored zero, with the "Impact" metric itself only reaching 1.4. In such cases, whether a fix is ultimately implemented depends largely on Bitcoin Core's stance, and whether any fix gets adopted hinges on the positions of mining pools and key community influencers.
