Approved by: maintainer implicit VS: more references (e.g. CVE names, VuXML IDs, URLs) or a description