Incorrect affected package in composer advisories

[keshav-space]

Following are some of the incorrect affected packages in composer advisories:

• https://public.vulnerablecode.io/vulnerabilities/VCID-brq3-w452-aaap

  pkg:composer/zendframework/zend-xmlrpc@2.2.0-2.2.6
  pkg:composer/zendframework/zend-xmlrpc@2.1.0-2.1.6
  

• https://public.vulnerablecode.io/vulnerabilities/VCID-qpsh-6642-aaaf

  pkg:composer/zendframework/zend-view@2.3.0-2.3.1
  pkg:composer/zendframework/zend-view@2.0.0-2.2.7
  

• https://public.vulnerablecode.io/vulnerabilities/VCID-1umj-epra-aaac

  pkg:composer/sulu/form-bundle@2.0.0-2.5.3
  

This issue is direct result of bug in univers aboutcode-org/univers#136, which leads to incorrect parsing of the affected version range.

VCIO version: v34.0.0rc4

[keshav-space]

The was due to aboutcode-org/univers#136 and was fixed in aboutcode-org/univers#108