added CVE-2014-4931

@fabpot It should be <2.4.8