The dependency check version is outdated and tries to use https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-modified.meta
NVD has moved to https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta
Updating dependency check to the latest version of 6.0.3 seems to solve this problem.