Fix copy-pasta typo

README.md

@@ -3,10 +3,9 @@
 (Written in Go because, you know, "write once, run anywhere.")
 
 This is a simple tool that can be used to find vulnerable instances of
-log4j 1.x and 2.x (CVE-CVE-2019-17571, CVE-2021-44228) in
-installations of Java software such as web applications. JAR and WAR
-archives are inspected and class files that are known to be vulnerable
-are flagged.
+log4j 1.x and 2.x (CVE-2019-17571, CVE-2021-44228) in installations of
+Java software such as web applications. JAR and WAR archives are
+inspected and class files that are known to be vulnerable are flagged.
 
 This tool currently checks for known build artifacts that have been
 obtained through Maven. From-source rebuilds as they are done for