Yes I update the CVE-PENDING once the CVEs are in to keep the record straight.