Dependency-Track Flags Outdated CVE for Updated Package Version

## Current Behavior

Dependency-Track is flagging CVE-2017-7507 for an image based on eclipse-temurin:21-jre-alpine, even though the installed version of GnuTLS (3.8.8-r0) should not be vulnerable according to the CVE details.

We build an image using the base image eclipse-temurin:21-jre-alpine ([Docker Hub Link](https://hub.docker.com/layers/library/eclipse-temurin/21-jre-alpine/images/sha256-7832115c38e9359db1156f94f9228fdf1341388f17dbd9df6c45727d233d1f5f)).

The SBOM is generated using trivy 0.57.1 and pushed to Dependency-Track.
Dependency-Track reports CVE-2017-7507 as affecting GnuTLS, even though the installed version is 3.8.8-r0 (pkg:apk/alpine/gnutls@3.8.8-r0?arch=x86_64&distro=3.21.2)
Running Trivy locally on the same image does not report this CVE.

### Questions

Could this be a data synchronization issue in Dependency-Track’s vulnerability database?
Is there a way to verify how Dependency-Track maps vulnerabilities to package versions?
Any insights on why this outdated CVE might still be flagged?

Any guidance or explanation would be greatly appreciated!

## Steps to Reproduce

Pull the base image:

```docker pull eclipse-temurin:21-jre-alpine```

Scan it locally with Trivy:

```trivy image eclipse-temurin:21-jre-alpine```

Compare results with Dependency-Track analysis.

Dockerfile Used for Build:

```
FROM java:21-alpine

ENV TZ=Europe/Oslo

RUN mkdir lib

COPY web/target/lib/*.jar ./lib/
COPY web/target/app.jar .
```

Local Trivy Output (No CVE-2017-7507 Found):

```
$ trivy image eclipse-temurin:21-jre-alpine

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)
```

### Expected Behavior

The flagged CVE should match the actual vulnerability status of installed packages.
Since GnuTLS 3.8.8-r0 is well beyond version 3.5.12 (the vulnerable version stated in the CVE report), it should not be flagged.

### Dependency-Track Version

4.11.x

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

15

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported