Formats such as CycloneDX and SPDX describe names, versions and hashes. When a new flaw is announced, an SBOM lets you search what you ship instead of guessing.
SBOM
Software Bill of Materials: a machine-readable list of the components inside a build.