# Concepts for vulnerability reporting and management

Learn core concepts relating to vulnerability reporting and management on GitHub.

## Links

* [GitHub Advisory database](/en/enterprise-server@3.18/code-security/concepts/vulnerability-reporting-and-management/github-advisory-database)

  Research known security vulnerabilities and malware in open source packages, so you can understand and remediate the risks in your dependencies.

* [/innersource-advisories](/en/enterprise-server@3.18/innersource-advisories)

* [/repository-security-advisories](/en/enterprise-server@3.18/repository-security-advisories)

* [Global security advisories](/en/enterprise-server@3.18/code-security/concepts/vulnerability-reporting-and-management/global-security-advisories)

  Global security advisories are CVEs and GitHub-originated advisories affecting the open source world, located in the GitHub Advisory Database.

* [Coordinated Disclosure of Security Vulnerabilities](/en/enterprise-server@3.18/coordinated-disclosure)

* [/vulnerability-exposure](/en/enterprise-server@3.18/vulnerability-exposure)