Stop using :cve:, which doesn't work in 3.11 and earlier.

Author: Yhg1s

Doc/whatsnew/3.11.rst

@@ -2798,25 +2798,25 @@ os.path
   :data:`os.path.ALLOW_MISSING`.
   If used, errors other than :exc:`FileNotFoundError` will be re-raised;
   the resulting path can be missing but it will be free of symlinks.
-  (Contributed by Petr Viktorin for :cve:`2025-4517`.)
+  (Contributed by Petr Viktorin for CVE 2025-4517.)
 
 tarfile
 -------
 
 * :func:`~tarfile.data_filter` now normalizes symbolic link targets in order to
   avoid path traversal attacks.
-  (Contributed by Petr Viktorin in :gh:`127987` and :cve:`2025-4138`.)
+  (Contributed by Petr Viktorin in :gh:`127987` and CVE 2025-4138.)
 * :func:`~tarfile.TarFile.extractall` now skips fixing up directory attributes
   when a directory was removed or replaced by another kind of file.
-  (Contributed by Petr Viktorin in :gh:`127987` and :cve:`2024-12718`.)
+  (Contributed by Petr Viktorin in :gh:`127987` and CVE 2024-12718.)
 * :func:`~tarfile.TarFile.extract` and :func:`~tarfile.TarFile.extractall`
   now (re-)apply the extraction filter when substituting a link (hard or
   symbolic) with a copy of another archive member, and when fixing up
   directory attributes.
   The former raises a new exception, :exc:`~tarfile.LinkFallbackError`.
-  (Contributed by Petr Viktorin for :cve:`2025-4330` and :cve:`2024-12718`.)
+  (Contributed by Petr Viktorin for CVE 2025-4330 and CVE 2024-12718.)
 * :func:`~tarfile.TarFile.extract` and :func:`~tarfile.TarFile.extractall`
   no longer extract rejected members when
   :func:`~tarfile.TarFile.errorlevel` is zero.
   (Contributed by Matt Prodani and Petr Viktorin in :gh:`112887`
-  and :cve:`2025-4435`.)
+  and CVE 2025-4435.)

Misc/NEWS.d/next/Security/2025-06-02-11-32-23.gh-issue-135034.RLGjbp.rst

@@ -2,5 +2,5 @@ Fixes multiple issues that allowed ``tarfile`` extraction filters
 (``filter="data"`` and ``filter="tar"``) to be bypassed using crafted
 symlinks and hard links.
 
-Addresses :cve:`2024-12718`, :cve:`2025-4138`, :cve:`2025-4330`, and :cve:`2025-4517`.
+Addresses CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, and CVE 2025-4517.