Drupal: Fix CVE URI to latest