CVE CHECK scorev3

All,

In the poky layer (yocto-4.2.3 branch) I am using the built in cve-checker and running into an issue where it is unable to produce the scorev3 metric. All CVEs have a scorev3 equivalent to 0.0. When looking at poky (yocto-4.0.9 branch) I noticed that the cve-checker uses the 1.1 version of the NVD database and can successfully produce scorev3 when running a test build. The yocto-4.2.3 branch uses version 2 of the database. There have also been several patches that affect the way these scores are produced. I am just wondering if anyone might have any insight to this issue or maybe have a solution.

Thanks