VulnerabilityAnalysisTask failes

### Current Behavior

When uploading a new project via the API to Dependency track; the internal analyzer failes with the following error message
```
2026-01-05 18:37:30,377 INFO [InternalAnalysisTask] Starting internal analysis task [eventToken=2dee67d3-e098-4f0a-8b01-c642e30242a1, projectName=test-project, vulnAnalysisLevel=BOM_UPLOAD_ANALYSIS, projectUuid=11ac71ea-0209-44c5-b807-cf1fdea44d98, projectVersion=72745e5897ba17764fae0f3e3c17e345b0bbaa37]
2026-01-05 18:37:30,377 INFO [InternalAnalysisTask] Analyzing 203 component(s) [eventToken=2dee67d3-e098-4f0a-8b01-c642e30242a1, projectName=test-project, vulnAnalysisLevel=BOM_UPLOAD_ANALYSIS, projectUuid=11ac71ea-0209-44c5-b807-cf1fdea44d98, projectVersion=72745e5897ba17764fae0f3e3c17e345b0bbaa37]
2026-01-05 18:37:31,570 ERROR [VulnerabilityAnalysisTask] Failed to analyze project [eventToken=2dee67d3-e098-4f0a-8b01-c642e30242a1, projectName=test-project, vulnAnalysisLevel=BOM_UPLOAD_ANALYSIS, projectUuid=11ac71ea-0209-44c5-b807-cf1fdea44d98, projectVersion=72745e5897ba17764fae0f3e3c17e345b0bbaa37]
java.lang.IllegalArgumentException: expected '>' at position 103
at org.apache.lucene.util.automaton.RegExp.parseSimpleExp(RegExp.java:1231)
at org.apache.lucene.util.automaton.RegExp.parseCharClassExp(RegExp.java:1194)
at org.apache.lucene.util.automaton.RegExp.parseComplExp(RegExp.java:1182)
at org.apache.lucene.util.automaton.RegExp.parseRepeatExp(RegExp.java:1151)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1144)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseConcatExp(RegExp.java:1146)
at org.apache.lucene.util.automaton.RegExp.parseInterExp(RegExp.java:1137)
at org.apache.lucene.util.automaton.RegExp.parseUnionExp(RegExp.java:1131)
at org.apache.lucene.util.automaton.RegExp.(RegExp.java:487)
at org.apache.lucene.search.RegexpQuery.(RegexpQuery.java:144)
at org.apache.lucene.search.RegexpQuery.(RegexpQuery.java:126)
at org.apache.lucene.search.RegexpQuery.(RegexpQuery.java:93)
at org.apache.lucene.queryparser.classic.QueryParserBase.newRegexpQuery(QueryParserBase.java:576)
at org.apache.lucene.queryparser.classic.QueryParserBase.getRegexpQuery(QueryParserBase.java:758)
at org.apache.lucene.queryparser.classic.MultiFieldQueryParser.getRegexpQuery(MultiFieldQueryParser.java:273)
at org.apache.lucene.queryparser.classic.QueryParserBase.handleBareTokenQuery(QueryParserBase.java:824)
at org.apache.lucene.queryparser.classic.QueryParser.Term(QueryParser.java:469)
at org.apache.lucene.queryparser.classic.QueryParser.Clause(QueryParser.java:355)
at org.apache.lucene.queryparser.classic.QueryParser.Query(QueryParser.java:244)
at org.apache.lucene.queryparser.classic.QueryParser.TopLevelQuery(QueryParser.java:215)
at org.apache.lucene.queryparser.classic.QueryParserBase.parse(QueryParserBase.java:109)
at org.dependencytrack.search.FuzzyVulnerableSoftwareSearchManager.searchIndex(FuzzyVulnerableSoftwareSearchManager.java:170)
at org.dependencytrack.search.FuzzyVulnerableSoftwareSearchManager.fuzzySearch(FuzzyVulnerableSoftwareSearchManager.java:224)
at org.dependencytrack.search.FuzzyVulnerableSoftwareSearchManager.fuzzySearch(FuzzyVulnerableSoftwareSearchManager.java:158)
at org.dependencytrack.search.FuzzyVulnerableSoftwareSearchManager.fuzzyAnalysis(FuzzyVulnerableSoftwareSearchManager.java:127)
at org.dependencytrack.tasks.scanners.InternalAnalysisTask.versionRangeAnalysis(InternalAnalysisTask.java:146)
at org.dependencytrack.tasks.scanners.InternalAnalysisTask.analyze(InternalAnalysisTask.java:91)
at org.dependencytrack.tasks.scanners.InternalAnalysisTask.inform(InternalAnalysisTask.java:65)
at org.dependencytrack.tasks.VulnerabilityAnalysisTask.analyzeComponents(VulnerabilityAnalysisTask.java:288)
at org.dependencytrack.tasks.VulnerabilityAnalysisTask.analyzeProject(VulnerabilityAnalysisTask.java:167)
at org.dependencytrack.tasks.VulnerabilityAnalysisTask.analyzeProject(VulnerabilityAnalysisTask.java:201)
at org.dependencytrack.tasks.VulnerabilityAnalysisTask.inform(VulnerabilityAnalysisTask.java:86)
at alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:110)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.base/java.lang.Thread.run(Unknown Source)
```
No vulnerabilities are reported

### Steps to Reproduce

1.Upload cyclonedx sbom of test-project

### Expected Behavior

The analysis to succeed and vulnerabilities to be reported

### Dependency-Track Version

4.13.6

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Mozilla Firefox

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported