Issue with version formatting

[generalconsensus]

Cross posting this: drush-ops/drush#3731

Drupal advisories are not correctly formatted in this repo which causes drush to provide inconsistent output.

[dpagini]

I've been dealing with this a little bit today with the 8.5.8 upgrade, and this seems to me to be moreso a drush problem than a problem in this repo. Just my opinion but I think the way that command deals with semver just seems a little too basic. I wonder how something like 1.0-alpha4 gets interpreted by that command...?