vendor xyz Software Component Vulnerabilities