Easier correlation between affected versions and branches

[oliverchang]

If a vulnerability has multiple commit ranges, it may be useful to provide a mapping of versions to commit ranges.

[github-actions]

This issue has not had any activity for 60 days and will be automatically closed in two weeks