False positive for CVE-2024-43485 with dotnet 9 or 9.x.x packages

### Current Behavior

CVE-2024-43485 is being flagged as vulnerability but dotnet 9 or packages with >=8.0.10 are not affected according to dt.



### Steps to Reproduce

1. Create a csproj for dotnet 9
2. Reference System.Text.Json 9.0.1
3. Create sbom
4. Import sbom in dt
5. false positive for CVE-2024-43485

### Expected Behavior

1. Create a csproj for dotnet 9
2. Reference System.Text.Json 9.0.1
3. Create sbom
4. Import sbom in dt
5. No false positive

### Dependency-Track Version

4.12.2

### Dependency-Track Distribution

Container Image

### Database Server

H2

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported