Cvss4 vs cvss3 and issues downloading grype db

Grype
1

hi!
how can i know if a CVE has only cvss 4 (and not cvss 3)
is it possible?

moreover, i recently have issues downloading the db manually. when i run grype db list and after that try to download the url i receive 404

thanks!