Remove extra :project param from finder helper

ee/lib/api/helpers/vulnerability_findings_helpers.rb

@@ -32,9 +32,9 @@ module API
       # TODO: rename to vulnerability_findings_by https://gitlab.com/gitlab-org/gitlab/issues/32963
       def vulnerability_occurrences_by(params)
         pipeline = if params[:pipeline_id]
-                     params[:project].all_pipelines.find_by(id: params[:pipeline_id]) # rubocop:disable CodeReuse/ActiveRecord
+                     user_project.all_pipelines.find_by(id: params[:pipeline_id]) # rubocop:disable CodeReuse/ActiveRecord
                    else
-                     params[:project].latest_pipeline_with_security_reports
+                     user_project.latest_pipeline_with_security_reports
                    end
 
         return [] unless pipeline
@@ -47,7 +47,7 @@ module API
 
         vulnerability_occurrences = paginate(
           Kaminari.paginate_array(
-            vulnerability_occurrences_by(declared_params.merge(project: user_project))
+            vulnerability_occurrences_by(declared_params)
           )
         )