def check_cve_pattern(with_score):
    """Return the pattern for matching CVE entry."""
    if with_score:
        # please note that in graph DB, the CVE entries have the following format:
        # CVE-2012-1150:5.0
        # don't ask me why, but the score is stored in one field together with ID itself
        # the : character is used as a separator
        return r"CVE-(\d{4})-\d{4,}:(\d+\.\d+)"
    else:
        return r"CVE-(\d{4})-\d{4,}"