Use CVE-YYYY-NNNN format, for example CVE-2023-22527.