(fix) make vulnerability node_id more unique

[ibreakthecloud]

package (p1),version(v1), package_path (pp1) : vuln(cve1)
package (p1), version(v1), package_path (pp2): vuln(cve1)

In this case we were dropping vulnerabilities.

Example:

Two vulnerability with same cve, same package, same version, but different package_path

{
    "data": {
      "cve_caused_by_package": "github.com/docker/distribution:v2.8.1+incompatible",
      "cve_caused_by_package_path": "/home/deepfence/bin/package-scanner",
      "cve_container_layer": "",
      "cve_id": "CVE-2023-2253",
      "cve_link": "https://www.openwall.com/lists/oss-security/2023/05/09/1",
      "cve_severity": "medium",
      "exploitability_score": 2,
      "has_live_connection": false,
      "init_exploitability_score": 2
    },
    "node_id": "github.com/docker/distribution:v2.8.1+incompatibleCVE-2023-2253",
    "rule": {
      "cve_attack_vector": "cvss:3.1/av:n/ac:l/pr:l/ui:n/s:u/c:n/i:n/a:h",
      "cve_cvss_score": 6.5,
      "cve_description": "A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.",
      "cve_fixed_in": "2.8.2-beta.1",
      "cve_id": "CVE-2023-2253",
      "cve_link": "https://www.openwall.com/lists/oss-security/2023/05/09/1",
      "cve_overall_score": 6.5,
      "cve_severity": "medium",
      "cve_type": "golang",
      "exploit_poc": "",
      "parsed_attack_vector": "network",
      "urls": [
        "https://access.redhat.com/security/cve/CVE-2023-2253",
      ]
    },
    "scan_id": ""
  },

{
    "data": {
      "cve_caused_by_package": "github.com/docker/distribution:v2.8.1+incompatible",
      "cve_caused_by_package_path": "/usr/local/bin/vessel",
      "cve_container_layer": "",
      "cve_id": "CVE-2023-2253",
      "cve_link": "https://www.openwall.com/lists/oss-security/2023/05/09/1",
      "cve_severity": "medium",
      "exploitability_score": 2,
      "has_live_connection": false,
      "init_exploitability_score": 2
    },
    "node_id": "github.com/docker/distribution:v2.8.1+incompatibleCVE-2023-2253",
    "rule": {
      "cve_attack_vector": "cvss:3.1/av:n/ac:l/pr:l/ui:n/s:u/c:n/i:n/a:h",
      "cve_cvss_score": 6.5,
      "cve_description": "A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.",
      "cve_fixed_in": "2.8.2-beta.1",
      "cve_id": "CVE-2023-2253",
      "cve_link": "https://www.openwall.com/lists/oss-security/2023/05/09/1",
      "cve_overall_score": 6.5,
      "cve_severity": "medium",
      "cve_type": "golang",
      "exploit_poc": "",
      "parsed_attack_vector": "network",
      "urls": [
        "https://access.redhat.com/security/cve/CVE-2023-2253",
      ]
    },
    "scan_id": ""
  },

Using ID with cve_id + package_name + package_version, might led to dropping of CVEs which we have observed recently.