chg: mention CVE for 3.97.1