Fix typos in CVE text