feat: extra info in cyclonedx vulnerablity data

[mastersans]

• Extra detail such as ratings added according to specification
• fixes affects["versions"] field which was invalid according to cyclonedx vex specification(should be a list was a dict)
• source data taking into account more sources than NVD

cc @anthonyharrison