GIT: The versions introduced and fixed are full-length Git commit hashes. The repository’s commit graph is needed to evaluate whether a given version is in the range. The relation u < v is true when commit u is a (perhaps distant) parent of commit v.
https://ossf.github.io/osv-schema/#affectedrangestype-field

https://github.com/google/oss-fuzz-vulns