GHSA-qpxm-689r-3849 not returned by ODT on pkg:maven/org.apache.camel/camel-support@4.3.0

### Current Behavior

When downloading the SBOM (with the vulnerabilities) for a project having a dependency on pkg:maven/org.apache.camel/camel-support@4.3.0, the GHSA-qpxm-689r-3849 is not returned.
Only its equivalent CVE-2024-22371 is present within the SBO (and also within the ODT UI).
If we target the /vulnerability/project however we can see that ODT is aware there's an alias for the CVE-2024-22371.

We would expect, as we have both NVD & GHSA enabled as sources, to have both: the CVE & the GHSA.
To be honest in an ideal world we would expect to have one of them...and not have to deal with aliases and duplicates :( As our code is a spaghetti code :(

### Steps to Reproduce

1. Upload a SBOM holding the dependency:
{
"type": "framework",
"purl": "pkg:maven/org.apache.camel/camel-support@4.3.0?type=jar",
"group": "org.apache.camel",
"name": "camel-support",
"version": "4.3.0",
"description": "The Camel Support",
"bom-ref": "6489d3f4-d95b-416c-83fa-35c55c6ee3dc"
},
3. Download the SBOM (with the option ?variant=withVulnerabilities) / or check the UI:
4. 
Only the CVE-2024-22371 is returned
Within GitHub: https://github.com/advisories/GHSA-qpxm-689r-3849 -> the reference is well present towards CVE-2024-22371
Within api/v1/vulnerability/project/XXXX -> the aliases holds the link between the 2 IDs:
"aliases": [
{
"cveId": "CVE-2024-22371",
"ghsaId": "GHSA-qpxm-689r-3849",
"uuid": "e80275cb-383f-4854-b2ab-61d9a5ee3950"
}
],

### Expected Behavior

As for other components we woudl expect to have both CVE-2024-22371 & GHSA-qpxm-689r-3849 returned.

If we take the example of
{
"type": "framework",
"purl": "pkg:maven/org.springframework/spring-webmvc@6.1.12?type=jar",
"group": "org.springframework",
"name": "spring-webmvc",
"version": "6.1.12",
"description": "Spring Web MVC",
"bom-ref": "097e1aa1-a592-4dee-870a-6f87bb7e108c"
},
We have both CVE-2024-38816 & its equivalent GHSA-cx7f-g6mp-7hqm within the same SBOM/UI display

### Dependency-Track Version

4.12.0

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported