robclark add link to CVE and CAF advisory