The NVD has recently made a change to the /cves/ schema to remove problematic restrictions within some objects. (See https://nvd.nist.gov/general/news/api-cves-schema-restriction-update)

It looks as though this project may reference an older version of the schema here that will need to be updated to avoid future validation issues.

This change may be relevant to other areas of your project, this was the first place I noticed.