Apache Velocity tools XSS flaw impacts GOV domains

  • Internally tracked as CVE-2020-13959.