NVD uses westes:flex for recent CVEs in flex, based on the GitHub repo
(From OE-Core rev: 8bb6aa4b4acb16c59b66aa55b33053e3e8749e72)
Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>