Gradle components does not report vulnerabilities

### Current Behavior:

I have 2 projects with some common components: one managed by maven and another one managed by gradle.
The project manage by maven report vulnerabilities and the one managed by gradle not.

### Steps to Reproduce:

Build the same project with maven and gradle and generate the sbom (I'm using Gitlab-ci gemnasium-maven)

### Expected Behavior:

The two projects must report the same vulnerabilities for the same component

### Environment:

- Dependency-Track Version: 4.5.0
- Distribution: Docker
- BOM Format & Version: CycloneDX 1.4

### Additional Details:

Here is a snapshot which shows the difference: