add CVE pending message to teamplate if not CVE's are defined