Update CVE link

Change-Id: Ib9415127507ea319f94940ce0bba873188cc06eb
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/350642
Reviewed-by: Brian Wilkerson <brianwilkerson@google.com>
Commit-Queue: Phil Quitslund <pquitslund@google.com>
diff --git a/pkg/analyzer/lib/src/error/unicode_text_verifier.dart b/pkg/analyzer/lib/src/error/unicode_text_verifier.dart
index a0d6048..046e8b4 100644
--- a/pkg/analyzer/lib/src/error/unicode_text_verifier.dart
+++ b/pkg/analyzer/lib/src/error/unicode_text_verifier.dart
@@ -8,7 +8,7 @@
 import 'package:analyzer/src/error/codes.dart';
 
 /// A verifier that checks for unsafe Unicode text.
-// TODO(pq): update w/ a Dart CVE link once published
+/// See: https://nvd.nist.gov/vuln/detail/CVE-2021-22567
 class UnicodeTextVerifier {
   final ErrorReporter errorReporter;
   UnicodeTextVerifier(this.errorReporter);