change: exclude CVEs that have already been resolved

[fhrbata]

These CVEs have not yet been analyzed in the NVD and were identified by the esp-idf-sbom checker during a keyword search in the CVE descriptions. Since the affected components have already been updated to newer versions, these CVEs are no longer relevant to the current version. Therefore, they should be added to the exclude list.

Checklist

• [ ] Component contains License
• [ ] Component contains README.md
• [ ] Component contains idf_component.yml file with url field defined
• [ ] Component was added to upload job
• [ ] Component was added to build job
• [ ] Optional: Component contains unit tests
• [ ] CI passing

Change description

Please describe your change here

[github-actions[bot]]

Unit Test Results

  15 files  ±0    15 suites  ±0   20m 30s :stopwatch: -39s   27 tests ±0    27 :heavy_check_mark: ±0  0 :zzz: ±0  0 :x: ±0  395 runs  ±0  395 :heavy_check_mark: ±0  0 :zzz: ±0  0 :x: ±0 

Results for commit 6213fdeb. ± Comparison against base commit 40a2faee.