DepTrack flags vulnerabilities even though installed version number is unaffected

### Current Behavior

My project had these two vulnerabilities flagged in Deptrack which impact Bootstrap versions 3.X and 4.X.

CVE-2024-6531
Affects Bootstrap in Bootstrap Versions >=4.0.0 <=4.6.2
https://www.herodevs.com/vulnerability-directory/cve-2024-6531?bootstrap-nes

CVE-2024-6484
Affects Bootstrap in Bootstrap Versions >=3.2.0 <=3.4.1
https://www.herodevs.com/vulnerability-directory/cve-2024-6484?bootstrap-nes

However, my project is on Bootstrap 5.3.0, which should NOT be affected. And yet, they are both being flagged in Deptrack:


### Steps to Reproduce

1. Add `"bootstrap": "5.3.0"` as a project dependency in Deptrack.
2. Check for vulnerabilities.
3. The two vulnerabilities above will be flagged despite us installing a version that is not affected.

### Expected Behavior

I would expect DepTrack to NOT flags vulnerabilities of Bootstrap v3 and v4 when I am using Bootstrap v5.

### Dependency-Track Version

4.13.2

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Mozilla Firefox

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported