The current CVE creation button is a link to a certain repo, it seems like the repo itself was hard coded to gitlab-org/cves. See the screenshot down below 👇
gitlab-org/cves