Our goal is to provide a security advisory within 24 hours of disclosure.
NVD is one of hundreds of sources leveraged to author security advisories (not all even appear in the NVD). It is also worth noting that there is quite a lot of garbage in NVD. If we investigate a vendor disclosed vulnerability and determine it not to be of consequence, we'll issue a rejection advisory and save you from the noise. More materials explaining advisories and their contents can be found here.
