The [reference](https://cyclonedx.org/docs/1.4/json/#vulnerabilities_items_affects_items_versions_items_range) in the JSON 1.4. documentation to the PURL vers is no longer correct. I am not sure if [PURL](https://github.com/package-url/purl-spec/blob/master/PURL-SPECIFICATION.rst) supports version ranges now.