Allow maintainers to add blog references to the CVE

[JamieSlome]

I have seen various package/app release blogs written including references to the platform. We can use these blogs as references in the CVE.