GHSA records seen in repo advisory, but not present in this corpus?

[0x73746F66]

Trivy malware
Pretty well known problem
4 days since public
2 days in GHSA it would appear

But not present in the files of the GHSA database itslef

I have older examples years old not appearing and really couldn't be bother raising it

But this malware is pretty serious - it's time to ask what's going on with missing GHSA records