{"meta":{"title":"Concepts for vulnerability reporting and management","intro":"Learn core concepts relating to vulnerability reporting and management on GitHub.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/concepts","title":"Concepts"},{"href":"/en/code-security/concepts/vulnerability-reporting-and-management","title":"Vulnerability reporting and management"}],"documentType":"subcategory"},"body":"# Concepts for vulnerability reporting and management\n\nLearn core concepts relating to vulnerability reporting and management on GitHub.\n\n## Links\n\n* [GitHub Advisory database](/en/code-security/concepts/vulnerability-reporting-and-management/github-advisory-database)\n\n  Research known security vulnerabilities and malware in open source packages, so you can understand and remediate the risks in your dependencies.\n\n* [Innersource advisories](/en/code-security/concepts/vulnerability-reporting-and-management/innersource-advisories)\n\n  Enterprises can alert their internal repositories to vulnerabilities and ship automated fixes with Dependabot, using advisories that stay private to a single enterprise.\n\n* [Repository security advisories](/en/code-security/concepts/vulnerability-reporting-and-management/repository-security-advisories)\n\n  You can use repository security advisories to privately discuss, fix, and publish information about security vulnerabilities in your public repository.\n\n* [Global security advisories](/en/code-security/concepts/vulnerability-reporting-and-management/global-security-advisories)\n\n  Global security advisories are CVEs and GitHub-originated advisories affecting the open source world, located in the GitHub Advisory Database.\n\n* [Coordinated disclosure of security vulnerabilities](/en/code-security/concepts/vulnerability-reporting-and-management/coordinated-disclosure)\n\n  Vulnerability disclosure is a coordinated effort between security reporters and repository maintainers.\n\n* [Exposure to vulnerabilities in your code and in dependencies](/en/code-security/concepts/vulnerability-reporting-and-management/vulnerability-exposure)\n\n  Understand how vulnerabilities in your own code and in third-party dependencies contribute to your organization's overall security exposure, and how to measure and reduce that risk."}