I came across an answer which suggest installing x tool which have a recently found a high priority security risk, so I edit it to add: > **Update x ASAP: [CVE-2021-nnnnn](https://ubuntu.com/security/CVE-2021-mmmmm)**: High priority security vulnerability. The user who answered the question revert the edit arguing: > I reverted your edit because security vulnerability info isn't really relevant to the question and somewhat ephemeral. Here's the link to the CVE alert that was removed: ubuntu.com/security/CVE-2021-nnnnn I replied: > Being ephemeral doesn't make it less important. You could leave the security alert as long as it's relevant. Software with high priority security risks are relevant in this context. But I wonder what other people think. Should we add this (necessary ephemeral) security alerts on questions or answers in which the main subject is around a software with a high priority vulnerabilities? **Edit**: It seems there is a consensus that it should have been a comment. There is any case where should be an edit? What if there isn't a release patch yet?