Vulnerabilities
GHSA
Also: GitHub Security Advisory, GitHub Advisory Database
An advisory id from GitHub, like GHSA-xxxx-xxxx-xxxx, covering vulnerabilities in open-source packages.
In more detail
Many package flaws have a GHSA id before, or without, a CVE. The database maps advisories to affected and patched versions per ecosystem, which is what dependency scanners use.