verifies for cve? added