cravex2-reachability: Process extended reachability in DejaCode CRAVEX

[pombredanne]

Integrate extended reachability determination for vulnerability triage in CRAVEX triage rules, UI and API

[tdruez]

Implemented in:

• [cravex2-reachability] Process extended reachability #569

Changes

• Vulnerabilities confirmed as reachable in a product can now be flagged automatically via a new triage ruleset preset.
• The product vulnerabilities tab has a new filter to show only reachable (or non-reachable) vulnerabilities.
• The Product and ProductPackage API endpoints support filtering by reachability (has_reachable_vulnerability).
• CycloneDX exports include the reachability status of each vulnerability as a property.

Triage Rule

The rule that leverage the reachability was implemented in:

• [cravex2-reachability] Implement rule tools triaging vulnerabilities #560