Improve platform CVE DB generation

[fproulx-boostsecurity]

As caught and fixed in #170 we need to probably use the official Gitlab CVE DB for their stuff.... As the vuln range match is better than MITRE CVE DB