GitHub Security Advisory ID (GHSA)
ID ghsa_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of an advisory in the GitHub Advisory Database: GHSA- and three groups of four characters separated by hyphens. The characters are random and come from the set 23456789cfghjmpqrvwx, always in lower case. An advisory that has a CVE identifier keeps its GHSA ID as well; OSV.dev also uses GHSA IDs as entry ids.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^GHSA(?:-[23456789cfghjmpqrvwx]{4}){3}$Python re syntax.
Examples
| Value | Description |
|---|---|
| GHSA-jfh8-c2jp-5v3q | Remote code injection in Log4j (CVE-2021-44228) |
| GHSA-vp9c-fpxx-744v | Example in the OSV schema documentation |
| GHSA-JFH8-C2JP-5V3Q invalid | Upper case |
| GHSA-jfh8-c2jp-5v3a invalid | The letter a is not in the alphabet |
Sources
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/ghsa_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/ghsa_id.yamlon GitHub