Use declared_params within Vulnerabilities API

ee/lib/api/vulnerabilities.rb

@@ -38,7 +38,7 @@ def vulnerability_occurrences_by(params)
         not_found!('Project') unless project && can?(current_user, :read_project_security_dashboard, project)
 
         vulnerability_occurrences = Kaminari.paginate_array(
-          vulnerability_occurrences_by(params.merge(project: project))
+          vulnerability_occurrences_by(declared_params.merge(project: project))
         )
 
         present paginate(vulnerability_occurrences),