add to index and fixup some other links

Author: fdevans

docs/history/cves/index.md

@@ -53,4 +53,6 @@ These are the Security Advisories Rundeck has issued in the past.  It is always
 * [CVE-2024-38819 Path traversal vulnerability in functional web frameworks #2](cve-2024-38819.md).
 * [CVE-2024-38820 Spring Framework's DataBinder false positive](cve-2024-38820.md).
 * [CVE-2024-38827 Locale-sensitive string case conversion methods](cve-2024-38827.md).
-* [CVE-2024-45338 golang/x/net 0.20.0](cve-2024-38819.md).
+* [CVE-2024-45338 golang/x/net 0.20.0](cve-2024-38819.md).
+* [CVE-2025-41242 Spring Path traversal](cve-2025-41242.md).
+* [CVE-2025-48924 Issue in Apache Commons Lang](cve-2025-48924.md)