Query for the affected vulnerable package version presence across multiple products - [x] create UI - [x] create API We should have an API that mimics the UI with /vulnerabilities end point