Currently there is a limitation where Github Advisory Services doesn't send webhook events for withdrawn alerts, which causes wrong information in the Security tab within Jira.

With this, the Github Security information can be out-of-sync and cause data integrity issues.

Workaround

While a fix for this bug is not released, one workaround available would be to disconnect the Organization from the GitHub App, and then connect again.
We recommend waiting around 30 minutes before reconnecting to ensure the development information will be completely refreshed.
Please note Jira issues associated with security vulnerabilities may be lost.