Bump cvss from 2.6 to 3.1

Bumps [cvss](https://github.com/RedHatProductSecurity/cvss) from 2.6 to 3.1.
- [Release notes](https://github.com/RedHatProductSecurity/cvss/releases)
- [Commits](RedHatProductSecurity/cvss@v2.6...v3.1)

---
updated-dependencies:
- dependency-name: cvss
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

requirements.txt

@@ -1,4 +1,4 @@
 docker==6.1.3
 PyYAML==6.0.1
 click==8.1.7
-cvss==2.6
+cvss==3.1