diff --git a/2018/16xxx/CVE-2018-16472.json b/2018/16xxx/CVE-2018-16472.json
index 280b36a0436..bbbce2a9117 100644
--- a/2018/16xxx/CVE-2018-16472.json
+++ b/2018/16xxx/CVE-2018-16472.json
@@ -56,6 +56,11 @@
                 "name": "https://hackerone.com/reports/390847",
                 "refsource": "MISC",
                 "url": "https://hackerone.com/reports/390847"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20221204 [SECURITY] [DLA 3221-1] node-cached-path-relative security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00006.html"
             }
         ]
     }
diff --git a/2021/23xxx/CVE-2021-23518.json b/2021/23xxx/CVE-2021-23518.json
index 7abce6ca444..ff9faf70f59 100644
--- a/2021/23xxx/CVE-2021-23518.json
+++ b/2021/23xxx/CVE-2021-23518.json
@@ -61,6 +61,11 @@
                 "refsource": "MISC",
                 "url": "https://github.com/ashaffer/cached-path-relative/commit/40c73bf70c58add5aec7d11e4f36b93d144bb760",
                 "name": "https://github.com/ashaffer/cached-path-relative/commit/40c73bf70c58add5aec7d11e4f36b93d144bb760"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20221204 [SECURITY] [DLA 3221-1] node-cached-path-relative security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00006.html"
             }
         ]
     },