False positive: CVE-2020-25614 reported for github.com/antchfx/xmlquery@v1.3.1 (fixed in v1.3.1)

### Current Behavior

Dependency-Track reports a vulnerability CVE-2020-25614 for the component
github.com/antchfx/xmlquery@v1.3.1.

However, according to the NVD entry for this CVE: [https://nvd.nist.gov/vuln/detail/CVE-2020-25614#range-15099488](https://nvd.nist.gov/vuln/detail/CVE-2020-25614#range-15099488)

The description clearly states that versions before 1.3.1 are affected.
Version 1.3.1 is the fixed version and should not be flagged as vulnerable.

Example of affected component in the BOM:
```
"type" : "library",
"bom-ref" : "d43b55d0-5126-4b52-b14a-3313789d2135",
"name" : "github.com/antchfx/xmlquery",
"version" : "v1.3.1",
```

But Dependency-Track still reports:
```
"description" : "xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.",
```

### Steps to Reproduce

1.Use the CycloneDX SBOM tool to generate an SBOM.
2. Upload the generated SBOM to Dependency-Track for scanning, and generate a report.
3. The report identifies the following issue:

> "xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(Node).InnerText or possibly have unspecified other impact."

### Expected Behavior

Dependency-Track should not flag github.com/antchfx/xmlquery@v1.3.1 as vulnerable,
since CVE-2020-25614 only affects versions before 1.3.1.

### Dependency-Track Version

4.13.2

### Dependency-Track Distribution

Container Image

### Database Server

N/A

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Reproduce the report using Dependency-Track 4.13.2 and the BOM component github.com/antchfx/xmlquery@v1.3.1, following the listed CycloneDX upload steps. Trace the vulnerability version-matching path for CVE-2020-25614 and verify that the report no longer flags v1.3.1 while versions before it remain affected.

Written by the indexing model from the issue text.