See https://github.com/nexB/vulnerablecode/issues/566 'candidate-2.4.49-rc1' is not semver yet we use semver for Apache HTTPD for now.
See aboutcode-org/vulnerablecode#566
'candidate-2.4.49-rc1' is not semver yet we use semver for Apache HTTPD for now.