adapt to new CVE audit messages