Update with note about CVE reports
diff --git a/2014/2014-09.md b/2014/2014-09.md
index 1fff06f..a177201 100644
--- a/2014/2014-09.md
+++ b/2014/2014-09.md
@@ -6,6 +6,8 @@
 Current releases have been voted on according to the Apache vote policy. We are currently on track for XXX, and are actively working on versions X.Y.Z and
 beyond for the upcoming quarter. (PLUS ANY MORE AWESOME HERE)
 
+* MENTION CVE REPORTS HERE
+
 Since the last board report, Apache Cordova has had:
 
 - over XXX commits in its 51 (UPDATE#) Git repositories