This leads to the vers string vers:generic/>=0.0.0|<001a3278b5572e52c0ecac0bd1157bf2599502b7. Instead we can improve this to say vers:generic/<001a3278b5572e52c0ecac0bd1157bf2599502b7. In terms of usefulness of operating with commit hashes alone, I have no idea.
CVE-2022-24774 has
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24774.json
This leads to the vers string
vers:generic/>=0.0.0|<001a3278b5572e52c0ecac0bd1157bf2599502b7
. Instead we can improve this to sayvers:generic/<001a3278b5572e52c0ecac0bd1157bf2599502b7
. In terms of usefulness of operating with commit hashes alone, I have no idea.