CVE Audit: expect errata advisories and channel labels instead of IDs