Different vulnerabilities list results while uploading the same BOM on two different projects

### Current Behavior:
Two projects with different names was created. The same BOM has been uploaded through API in both projects. As a result I see a different number of vulnerabilities in these projects. Second (on the order of upload) project has less vulnerabilities. Number of dependencies are the same in both projects but for some reason some dependencies in second project doesn't have links to vulnerabilities and because of that can't be found in "Audit vulnerabilities tab". I didn't find anything special related to analysis process of these projects in logs.

### Steps to Reproduce:
Create two projects with different names. Upload the same BOM through API in both projects. Browse projects in Web Interface.

### Expected Behavior:
The number of vulnerabilities should be equal for these projects

### Environment:

- Dependency-Track Version: 4.2.2
- Distribution: Executable WAR
- BOM Format & Version: CycloneDX BOM created by CycloneDX Maven plugin v. 2.5.1
- Database Server: H2
- Browser: Google Chrome

### Additional Details: