No longer detected vulnerabilities should not be counted by default in Secure > Security dashboard
Summary
Secure > Security dashboard is currently counting vulnerabilities which are no longer detected as data to display. This is very unnatural and should be changed so they are not.
Steps to reproduce
Any project to which you add a dependency with vulnerabilities, run scan, then remove the dependency will show the vulnerabilities as no longer detected. The same can also be acheived by excluding directories containing secrets and using secret scanners.
Once you have created such history consult the graphs/panels (both in groups and repositories) and you'll see that they list the no longer detected vulnerabilities
Example Project
What is the current bug behavior?
Count all vulns when displaying data in Secure > Security dashboard.
What is the expected correct behavior?
Count only still detected vulnerabilities when displaying data in Secure > Security dashboard.