fix: update CPE pattern to remove FP

resolves #7683

Author: jeremylong

core/src/main/resources/dependencycheck-base-suppression.xml

@@ -202,7 +202,7 @@
         FP per #3230
         ]]></notes>
         <packageUrl regex="true">^pkg:maven/io\.github\.x\-stream/mxparser@.*$</packageUrl>
-        <cpe>cpe:/a:xstream_project:xstream</cpe>
+        <cpe regex="true">cpe:/a:xstream(_project)?:xstream</cpe>
         <cpe>cpe:/a:oracle:jdk</cpe>
     </suppress>
     <suppress base="true">
@@ -1700,7 +1700,7 @@
         Suppresses false positives for components within guava.
         ]]></notes>        
         <packageUrl regex="true">^pkg:maven/com\.h3xstream\.retirejs/retirejs\-core@.*$</packageUrl>
-        <cpe>cpe:/a:xstream_project:xstream</cpe>
+        <cpe regex="true">cpe:/a:xstream(_project)?:xstream</cpe>
     </suppress>
     <suppress base="true">
         <notes><![CDATA[