Update with CVE references.