False positive on pandas 1.3.3 - CVE-2020-13091

### Current Behavior:
Using pandas in version 1.3.3 raised CVE-2020-13091 which was fixed beyond 1.0.3 (found by the OSS index analyzer)

### Steps to Reproduce:
Use the attached prepared bom to reproduce the issue. Create a new project with the frontend and upload the bom file.
[reproduce-bom.xml.zip](https://github.com/DependencyTrack/dependency-track/files/8891524/reproduce-bom.xml.zip)

### Expected Behavior:
CVE-2020-13091 will not be raised by the tracker due to pandas 1.3.3.

### Environment:
- Dependency-Track Version: 4.5.0
- Distribution: Docker
- BOM Format & Version: XML 1.4 (produced with anchore syft 0.47.0 on docker)
- Database Server: PostgreSQL
- Browser: Firefox 100.0.2