fixed issue as report about non vulnerable version of component

[Yuya-Miyoshi]

You should skip reporting vulnerability information when component version is not vulnerable.

[Ali-Razmjoo]

I think this is good information, considered is as component enumerating...