SBOM Upload fails with 500er error with foreign key constraint violation

```
could not scan asset: ERROR: insert or update on table "dependency_vulns" violates foreign key constraint "fk_dependency_vulns_cve" (SQLSTATE 23503)
```

It was identified on the openCode instance, https://gitlab.opencode.de/open-code/oci/nginx/-/jobs/1524959

It could be re-triggered via background job trigger in settings.

Unfortunately, could not reproduce on main with sbom upload via UI.