Wrong positives for com.typesafe.config

### Current Behavior

There are wrong positives listed for library with fuzzy cpe matching enabled
com.typesafe.config v1.4.1
e.g. CVE-2017-0374 belonging to perl lib/ConfigModel.pm, not java library

disabling fuzzy cpe matching and reanalyzing does not remove them
disabling fuzzy cpe matching and uploading sbom as new version does not show any vulnerabilities, even for other libraries with known vulnerabilites (e.g. https://mvnrepository.com/artifact/com.github.jknack/handlebars/4.3.1)


### Steps to Reproduce

1.enable fuzzy cpe matching in settings -> Analyzers -> Internal
2.upload sbom containing com.typesafe.config v1.4.1 (cyclonedx xml format)

`
com.typesafe
com.typesafe
config
1.4.1
configuration library for JVM languages using HOCON files
optional

aca1b7e7925a8643fe226bfce5a45217
19058a07624a87f90d129af7cd9c68bee94535a9
4c0aa7e223c75c8840c41fc183d4cd3118140a1ee503e3e08ce66ed2794c948f
5e30e5d30f76693c7338f0f96e2c880aa15203f5d2796254fe7d6e89197c2fd6f70d2aee9f9e1b345c4eb4fe0bd61ea4181524a7f066c470eac99a2ed0744d39
7c0a0dfa459e2daaa1bb2ebcf03cd59881e6178ad5ecfe27918eab333349f56d5ac9754085c41cfcca3343afca4e7092



Apache-2.0
https://www.apache.org/licenses/LICENSE-2.0


pkg:maven/com.typesafe/config@1.4.1?type=jar
https://github.com/lightbend/confighttps://github.com/lightbend/config
`

### Expected Behavior

cves are correctly assigned, and when caused by fuzzy cpe matching, removed with reanalyze

### Dependency-Track Version

4.8.2

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

13.5

### Browser

N/A

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported