fix: resolve NPE when processing CVE-2025-2682 (#7558)

Author: jeremylong

core/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java

@@ -1090,7 +1090,7 @@ public void updateVulnerability(DefCveItem cve, String baseEcosystem) {
         clearCache();
         final String cveId = cve.getCve().getId();
         try {
-            if (cve.getCve().getVulnStatus().toUpperCase().startsWith("REJECT")) {
+            if (cve.getCve().getVulnStatus() != null && cve.getCve().getVulnStatus().toUpperCase().startsWith("REJECT")) {
                 deleteVulnerability(cveId);
             } else {
                 if (cveItemConverter.testCveCpeStartWithFilter(cve)) {