FYI: JSON for Modern C++ repo being linked to JSON++ (jsonxx) for CVE advisories

[docbugger]

FYI: two advisories, CVE-2022-23459 (Critical) and CVE-2022-23460 (High) were updated on Google's Osv.Dev last week to be linked to
https://github.com/nlohmann/json, even though the issues are in the (archived) https://github.com/hjiang/jsonxx.

Per Google:

"Looking into this, it seems that the CPE dictionary we are matching to includes the nlohmann repository as a mapping for this vendor/product combination. This is likely false, but would need NIST to update it."

[nlohmann]

Thanks to the heads up. We share no code with that other than project, so it's an interesting assessment.