[java-sig-commits] [Bug 1937441] CVE-2020-13936 velocity: arbitrary code execution when attacker is able to modify templates [fedora-all]