I really hope it will not be based in the US where law is dead and where IRS at the command of executive can remove non-profit status. That would defeat all the stated goals in the press release.

Looks like the negative publicity worked. CVEs are back on the menu: https://www.bleepingcomputer.com/news/security/cisa-extends-funding-to-ensure-no-lapse-in-critical-cve-services/

The only people who can save us are the ones who created the mess!