False security warnings for system libraries

It seems to be giving false positives for security vulnerabilities, even on a fully up to date 24.04:

For example you can see that the Curl 8.5 in Ubuntu has patches for the security issues that are listed in WPvulnerability:

https://changelogs.ubuntu.com/changelogs/pool/main/c/curl/curl_8.5.0-2ubuntu10.6/changelog

I think listing vulnerabilities for the PHP, Nginx, Imagemagick are going to have similar issues: check the changelog, they regularly provide the security updates:

https://packages.ubuntu.com/noble/imagemagick

https://packages.ubuntu.com/noble/nginx

https://packages.ubuntu.com/noble/php8.3

I think Fedora/Red hat system updates would have to be considered in a similar way – not listing vulnerability by the version.