Reference specific CVE ID for logged message.

Author: kwwall

src/main/java/org/owasp/esapi/reference/DefaultEncoder.java

@@ -343,7 +343,7 @@ public String encodeForSQL(Codec codec, String input) {
         // This will throw if this method is not explicitly enabled in ESAPI.properties.
         ensureDangerousMethodExplicitlyEnabled( DefaultEncoder.class.getName() + ".encodeForSQL",
                                                 "<default>",
-                                                "see CVE-2025-????? and ESAPI Security Bulletin #13 for details" );
+                                                "see CVE-2025-5878 and ESAPI Security Bulletin #13 for details" );
 
         if( input == null ) {
             return null;