Feature: Import vulnerabilities from BOM

Some tools out there (Grype) are able to generate vulnerabilities using the CycloneDX vulnerabilities extension: `http://cyclonedx.org/schema/ext/vulnerability/1.0` and often make use of different vulnerability sources such as GHSA. It'd be great if submitting a BOM with vulnerabilities also populated the internal db with any unknown vulnerabilities from these BOM files.

### Current Behavior:
BOM file is imported and vulnerabilities ignored

### Proposed Behavior:
BOM file imported, vulnerabilities and components parsed and database populated with unknown vulnerabilities.