CVE tracking code merge