After dropping the `Vulnerabilites::Finding` objects, some
`Vulnerability` objects would become invalid so we get rid
of them at the same time.

Changelog: changed