GHSA-g59m-gf8j-gjf5
The advisories a survey carries survive only in its brief's rendered list of affected locations, and that list stops after a fixed number of entries without the count above it changing — so what a survey was seen to carry is what fitted.
The package it is raised against
Seen against aws-sdk-sso and 10 other package names. One advisory id reaching the corpus under more than one package name is stated rather than resolved by picking one.