What is the format of the GitHub security advisory form?

GitHub states that its repository security advisory form is a standardized form that matches the Common Vulnerabilities and Exposures (CVE) description format. GitHub Security Advisories build on the CVE ecosystem, and GitHub itself is a CVE Numbering Authority capable of assigning CVE identification numbers for eligible vulnerabilities. The advisory form captures structured information such as the vulnerability description, affected products, vulnerable and patched versions, severity, CWEs, references, and CVE information. A CNA is an organization authorized to assign CVEs rather than a separate advisory-description format. Dependabot alerts are generated for vulnerable dependencies and are unrelated to the structure of the security advisory form. Therefore, the CVE description format is the correct choice.