Changes to List CVEs with fleet-wide customer and release impact counts. CVEs come from each reported release's recorded image inventory. Counts include only exact latest reported-release memberships visible to the caller; instances without a resolved reported release are not inferred.