Minor addition to the cvss object

[floydtree]

Related Issue: n/a

Description of changes:

1. Adding vendor_name to the cvss object to help represent the source/vendor that provided the cvss scores.
2. Snippet from a sample source event from Amazon Inspector

"cvss": [
      {
        "baseScore": 10,
        "scoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1",
        "source": "UBUNTU_CVE"
      },
      {
        "baseScore": 10,
        "scoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1",
        "source": "NVD"
      }
    ],

[irakledibm]

Small spelling mistake in a CHANGELOG: vendor_namr. Not a big deal.

[mikeradka]

Nit - minor typo in the CHANGELOG. Otherwise looks good.

addressed ;)