Affected versions are wrong for CVE's in maven::GitHub Security Advisory Maven bucket.

For this package org.apache.axis2:axis2 there is a GHSA published [https://github.com/advisories/GHSA-wwq7-pxwc-p4rc](ghsa) in which the affected versions is <=1.6.2 but in trivy-db we've it as <1.8.0 which is wrong. 