package/jose: add CPE identifier
cpe:2.3:a:latchset:jose:14:*:*:*:*:*:*:* is a valid CPE ID.
See:
https://nvd.nist.gov/products/cpe/detail/7E6A7E16-E8B0-47BA-B7C7-0D4102933031
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 23e6d91c69dc275c8fa5b3a172460976931fe1c1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Peter Korsgaard