incorrect pathname when 6 or 7 digits at end of ID

[ElectricNroff]

for https://github.com/dwelch2344/cve-ref-archival/blob/24ca51169ff07766fc5d35a2ab3bc8b2a47c195c/src/engine/cve/api.ts#L18

const prefix = `${first}${idBase.length <= 4 ? '' : second}xxx`

there can be more than two digits before the xxx such as in https://github.com/CVEProject/cvelistV5/tree/main/cves/2014/125xxx

These types of CVE IDs were used last year (see https://www.cve.org/CVERecord?id=CVE-2014-125110 for example) and possibly also this year.