Merge "Update cpe for vulnerability scanners"
diff --git a/METADATA b/METADATA
index eb67a96..9573fb4 100644
--- a/METADATA
+++ b/METADATA
@@ -16,4 +16,7 @@
   last_upgrade_date { year: 2019 month: 8 day: 23 }
   # would be NOTICE save for GPL in java/core/src/stubs/sun/misc/Unsafe.java
   license_type: RESTRICTED
+  security {
+    tag: "NVD-CPE2.3:cpe:/a:google:protobuf:3.9.0"
+  }
 }