yarn: fix CWE parsing

[valentijnscholten]

fix yarn parser to handle wildly formatted list of CWEs: #5999

    # Somehow multiple CWEs end up in the json report like this
    # [\"CWE-173\",\"CWE-200\",\"CWE-601\"]
    # which becomes after json load:
    # ["CWE-173","CWE-200","CWE-601"]
    # we parse this and take the first CWE

EDIT: Seems to happen also for single CWE values

    # [\"CWE-173\"]

[dvdgsng]

Any idea what DefectDojo is doing when running an import that could cause such an issue out of the blue? We are running v2.7.1 and haven't touched the deployment for 25 days. So we would expect it to be rather stable.

[valentijnscholten]

yarn has changed their output format or logic, or gets data from another source formatted in a different way.

[dvdgsng]

AFAICT we haven't changed the node version either :/ need to verify though

[valentijnscholten]

It might be a bug / side effect in yarn that they may fix at some point.