I wonder if high severity CVEs graph is different. E.g. not https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/