{"meta":{"title":"Concepts for vulnerability reporting and management","intro":"Learn core concepts relating to vulnerability reporting and management on GitHub.","product":"Security and code quality","breadcrumbs":[{"href":"/en/enterprise-server@3.21/code-security","title":"Security and code quality"},{"href":"/en/enterprise-server@3.21/code-security/concepts","title":"Concepts"},{"href":"/en/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management","title":"Vulnerability reporting and management"}],"documentType":"subcategory"},"body":"# Concepts for vulnerability reporting and management\n\nLearn core concepts relating to vulnerability reporting and management on GitHub.\n\n## Links\n\n* [GitHub Advisory database](/en/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management/github-advisory-database)\n\n  Research known security vulnerabilities and malware in open source packages, so you can understand and remediate the risks in your dependencies.\n\n* [/innersource-advisories](/en/enterprise-server@3.21/innersource-advisories)\n\n* [/repository-security-advisories](/en/enterprise-server@3.21/repository-security-advisories)\n\n* [Global security advisories](/en/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management/global-security-advisories)\n\n  Global security advisories are CVEs and GitHub-originated advisories affecting the open source world, located in the GitHub Advisory Database.\n\n* [Coordinated Disclosure of Security Vulnerabilities](/en/enterprise-server@3.21/coordinated-disclosure)\n\n* [Exposure to vulnerabilities in your code and in dependencies](/en/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management/vulnerability-exposure)\n\n  Understand how vulnerabilities in your own code and in third-party dependencies contribute to your organization's overall security exposure, and how to measure and reduce that risk."}