Upgrade to common v2.9.0 in order to add id JSON field to vulnerabilities, in the JSON reports.
See gitlab-org/gitlab#36777 (closed)