{"meta":{"title":"漏洞报告和管理的概念","intro":"了解与漏洞报告和管理 GitHub相关的核心概念。","product":"安全性和代码质量","breadcrumbs":[{"href":"/zh/enterprise-server@3.21/code-security","title":"安全性和代码质量"},{"href":"/zh/enterprise-server@3.21/code-security/concepts","title":"Concepts"},{"href":"/zh/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management","title":"漏洞报告和管理"}],"documentType":"subcategory"},"body":"# 漏洞报告和管理的概念\n\n了解与漏洞报告和管理 GitHub相关的核心概念。\n\n## Links\n\n* [GitHub 通告数据库](/zh/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management/github-advisory-database)\n\n  研究开放源代码包中的已知安全漏洞和恶意软件，以便你可以了解和修正依赖项中的风险。\n\n* [/innersource-advisories](/zh/enterprise-server@3.21/innersource-advisories)\n\n* [/repository-security-advisories](/zh/enterprise-server@3.21/repository-security-advisories)\n\n* [全局安全公告](/zh/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management/global-security-advisories)\n\n  全球安全公告是影响开源世界的 CVE 和由 GitHub 发起的公告，位于 GitHub Advisory Database 中。\n\n* [协调披露安全漏洞](/zh/enterprise-server@3.21/coordinated-disclosure)\n\n* [代码及其依赖项中存在的漏洞风险](/zh/enterprise-server@3.21/code-security/concepts/vulnerability-reporting-and-management/vulnerability-exposure)\n\n  了解你自己的代码和第三方依赖项中的漏洞如何对组织的整体安全风险以及如何衡量和降低风险造成影响。"}