Added CVE and disclosure date