SBOM Vulnerability Analyzer

Parse a CycloneDX or SPDX SBOM and cross-check its components against known-vulnerable package versions.