[Bug]: ui/vulnerabilities: entries need more detail about the CVE

[mikemccracken]

zot version

v1.4.3

Describe the bug

as a person evaluating cves found in an image I am responsible for, I need to quickly find the following info about a cve:

1. link to a database with any bugs filed, diffs/PRs for fixes, discussions etc. for example, NIST's NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-39325

2. if available from the scanner, the distro package name(s) that have the bug and if applicable the versions where it was fixed.

3. also if available, file names where the scanner thinks it found the cve, to help understand possible false positives

To reproduce

1. Configuration
2. Client tool used
3. Seen error

Expected behavior

No response

Screenshots

No response

Additional context

No response

[andaaron]

Backend side enhancement: project-zot/zot#2079
UI side will need a separate PR.

[andaaron]

BE was actually updated in project-zot/zot#2086

[andaaron]

@mikemccracken we have an update, merged in #419 / project-zot/zot#2233

We could not obtain the file names, but the package names/versions, and reference URL have been added.
There is a field https://github.com/aquasecurity/trivy/blob/a96f66f176e512ffb029f2d421e2d77b805eb6ee/pkg/types/vulnerability.go#L14, but it is the path of the package, not and actual file in the package, and is not available for all package types.

[mikemccracken]

current version looks like it resolves all of these, thanks!