Add bug references for CVE-2018-20574/{yaml-cpp,yaml-cpp0.3}