A version range is the span of software releases identified as affected by a vulnerability or covered by a security fix. Advisories may specify affected versions, fixed versions, or both; the exact boundaries can vary by product edition, release branch, or vendor packaging.
Checking the range helps defenders determine whether a particular installation needs action. Compare the system’s exact version and build with the vendor advisory rather than relying on the product name alone. For example, an NGINX deployment may be exposed only if its release falls within the affected range and the flaw’s prerequisites apply. A version outside that range is not automatically safe if it is unsupported or differs through custom builds, so verify the advisory’s scope and recommended update.