Concepts for vulnerability reporting and management

Research known security vulnerabilities and malware in open source packages, so you can understand and remediate the risks in your dependencies.

Global security advisories are CVEs and GitHub-originated advisories affecting the open source world, located in the GitHub Advisory Database.

Understand how vulnerabilities in your own code and in third-party dependencies contribute to your organization's overall security exposure, and how to measure and reduce that risk.