Vulnerabilities are currently counted using the stored artefact, this
commit changes that to count from the database.