clear statement on CVE-2023-42118