We have the vulnerabilities page. Which shows all of them. What would make more sense to me, is a (default) filter, which only shows vulnerabilities present in the data (ingested SBOMs).