Update service to query cves against product native components