Correct the CVE reference
Merge branch 'master' into autoload