Advisories coming from EPSS and Suse are not related to any package, but carry vital information for severities which could be related for getting vital info like exploitibility, weighted severity and risk for an advisory and packages impacted through those advisories.