Add ability to get listing of vulnerable components and the projects they are used by

### Current Behavior:
Right now there is no easy way to get listing of vulnerable components and the projects they are used by. It would likely involve lots of queries made to the /project, /finding, /dependency, /component, and /vulnerability APIs.

This is a typical use case where a new vulnerability is announced on component/library and an organization wants to quickly analyze which projects (that use the component) need to be remediated.

### Proposed Behavior:
Add a new endpoint (or modify an existing endpoint) so that way the relevant data could be retrieved.