GHSA stands for GitHub Security Advisory. It is an advisory identifier used to track a vulnerability in GitHub’s security advisory system, often before a CVE is assigned or alongside one. A GHSA ID gives defenders a stable label for triage, patching, and coordination while the technical details are still being confirmed.
In cyber security, GHSA labels matter because they help teams recognize that a package, library, or component may be exposed even if public reporting is still incomplete. In real incidents and defenses, engineers use the advisory to check affected versions, verify whether their code depends on the vulnerable component, and decide whether to upgrade, mitigate, or remove risky functionality. Seeing a GHSA in an issue tracker or release note is a signal to treat the software as part of the attack surface until a fixed version is deployed.