Docs: CVE note