Words have multiple meanings depending on context, and here it's at best ambiguous. In the context of security incidents, logging, auditing, etc., "advisory" is often used as a severity level (and one of the lower ones at that).

So, yes, technically, it's de-facto advisory to publish this information, but assigning "advisory" as a severity tag here is questionable.