Upgraded extensions are not removed from the extension vulnerabilities list

Reproduction steps:

• install a extension with a known vulnerability
• re-index the extensions vulnerabilities
• see the extension in the security vulnerabilities list
• upgrade the extension to a version with no known vulnerabilities
• re-index the extensions vulnerabilities

Expected:

• the old extension version is not listed

Actual:

• the old extension version is still listed