CVE Audit: added condition to check candidates