fix(generic parser): prevent nested list when cve and vulnerability_ids are both present

fix(generic parser): prevent nested list when cve and vulnerability_ids are both present #35426