Hello @jokke,
Thanks for reaching out, we have updated both changelogs to add this information. Moreover, we have published a topic summarizing the actions done to fix the CVEs.