Include affected 4.0.0 pre-release versions
This improves the detection of dependency scanning where it fails to classify vulnerable pre-release versions as affected because it lacks the data to do so in this scenario.
- Relates to discussion in gitlab-org/gitlab#442028 (comment 1949506029)
- Confirmed in NVD entry's CPEs.
Edited by Oscar Tovar