Parsing semver values from CVE records

Preliminaries