adding another CVE check to the rules