Incorrect package reference data for CVE-2025-22223

[turambarturin]

For the "Spring Security Core" package, only the affected version 4.6.0 is linked. However, versions 6.4.0 - 6.4.3 are affected.

https://public.vulnerablecode.io/vulnerabilities/VCID-cgga-8x6z-47f1?search=%20VCID-cgga-8x6z-47f1

[pombredanne]

@turambarturin Thanks for the report. See also:

• Collect Spring vulnerabilities upstream directly #1844