Minor hardening. Added default to affected status as unlike the CVE 5.0 spec, CycloneDX does not support specifying a default.
Minor hardening. Added default to affected status as unlike the CVE 5.0 spec, CycloneDX does not support specifying a default.

Signed-off-by: Steve Springett <9ce5770b3bb4b2a1d59be2d97e34379cd192299f@springett.us>

CycloneDX/specification,CycloneDX/specification,CycloneDX/specification,CycloneDX/specification,CycloneDX/specification