Eventually remove CVE-2018-18307

[postmodern]

CVE-2018-18307 is now marked as Disputed, but not yet marked as Rejected. Once the CVE has been marked as Rejected we should remove it here as well.