Update cve.md to be true

[todb]

This is ready to go whenever, but I suggest holding off on merging this update until Friday afternoon to time it against any press that might be forthcoming that day.