False positive reported vulnerability

### Current Behavior

DependencyTrack reports a false positive CVE as the version from NVD is not compared in the right way. If you upload the following cyclonedx file to DependencyTrack 4.5.0, DependencyTrack will report a vulnerability which was fixed in 4.0.6. However, the version in the cyclonedx file is 4.1.3.

See screenshot and cyclonedx file.
[cyclonedx.zip](https://github.com/DependencyTrack/dependency-track/files/10192906/cyclonedx.zip)

### Steps to Reproduce

1. Upload the attached cyclonedx file to DependencyTrack 4.5.0.
2. See if the CVE-34265 is reported in DependencyTrack.

### Expected Behavior

CVE-34265 is not reported in DependencyTrack.

### Dependency-Track Version

4.5.x

### Dependency-Track Distribution

Container Image

### Database Server

N/A

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported