I get across an answer in which suggest installing x tool which have a recently found high priority security risk, so I edit it to add:

> **Update x ASAP: [CVE-2021-nnnnn](https://ubuntu.com/security/CVE-2021-mmmmm)**: High priority security vulnerability.
	
The user who answered the question revert the edit arguing:

> I reverted your edit because security vulnerability info isn't really relevant to the question and somewhat ephemeral. Here's the link to the CVE alert that was removed: ubuntu.com/security/CVE-2021-nnnnn

I believe that:

> Being ephemeral doesn't make it less important. You could leave the security alert as long as it's relevant. Software with high priority security risks are relevant in this context.

But I wonder what other people think. Should we add this (necessary ephemeral) security alerts on questions or answers in which the main subject is around a software with a high priority vulnerabilities?