Wrong vulnerabilities detected

### Current Behavior

There is a mapping issue we have detected. The component Ace (Ajax.org Cloud9 Editor) version 1.3.3 appears to gather vulnerabilities from the software component ACE of VMWare. But this is not correct for mappView and this SBOM. The Ace (Ajax.org Cloud9 Editor) is a standalone code editor written in JavaScript (https://github.com/ajaxorg/ace) - not a VMWare product.
We've provided the PURL pkg:github/ajaxorg/ace@1.3.3, as indicated in the following screenshot, following the PURL-specification (https://github.com/package-url/purl-spec).

The listed vulnerabilities under (3), show all VMWare vulnerabilities, which are not applicable for the Ace (Ajax.org Cloud9 Editor) used in this SBOM. shown in image 1

For example, the vulnerability CVE-2009-0177 (https://dependencytrack.test.abilityplatform.abb/vulnerabilities/NVD/CVE-2009-0177) provides this information about VMware ACE in its vulnerability overview. shown in image 2

So the question now is, how do we create the correct mapping?

### Steps to Reproduce

1.Create a project and add the component in DT and check the vulnerabilities for that

### Expected Behavior

It should detect correct vulnerabilities based on the purl

### Dependency-Track Version

4.8.2

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

10.1

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported