Vulnerability not detected in gt-xsd-core

### Current Behavior

I use an application that includes org.geotools.xsd:gt-xsd-core 26.7
According to https://mvnrepository.com/artifact/org.geotools.xsd/gt-xsd-core/26.7 there's one critical vulnerability that is detected also when I scan the image with trivy containing the library.
In DependencyTrack I am using internal analyzer

### Steps to Reproduce

1. Include in a project a dependency to org.geotools.xsd:gt-xsd-core 26.7 or its parent org.geotools.xsd:gt-xsd-kml 26.7
2. Perform scan -> no vulnerability associated to gt-xsd-core

### Expected Behavior

Vulnerability CVE-2024-36404 shall be detected

### Dependency-Track Version

4.13.4

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

10.5

### Browser

Mozilla Firefox

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported