fouzhe add CVE IDs