diff --git a/secjson/statements.json b/secjson/statements.json
index 90faecb..0dc3f3f 100644
--- a/secjson/statements.json
+++ b/secjson/statements.json
@@ -42,12 +42,12 @@
{
"base":"fips",
"cve":"CVE-2007-6755",
- "text":"Only OpenSSL FIPS module shipped Dual EC DRBG, and it was not affected."
+ "text":"Only OpenSSL FIPS module shipped Dual EC DRBG, and it [was not affected](https://marc.info/?l=openssl-announce&m=138747119822324)."
},
{
"base":"none",
"cve":"CVE-2002-20001",
- "text":"We do not consider this to be a vulnerability in OpenSSL."
+ "text":"[We do not consider this to be a vulnerability in OpenSSL](https://github.com/openssl/openssl/issues/17374)."
}
]