# Concepts for vulnerability reporting and management

Learn core concepts relating to vulnerability reporting and management on GitHub.

## Links

* [GitHub Advisory database](/en/enterprise-server@3.22/code-security/concepts/vulnerability-reporting-and-management/github-advisory-database)

  Research known security vulnerabilities and malware in open source packages, so you can understand and remediate the risks in your dependencies.

* [/innersource-advisories](/en/enterprise-server@3.22/innersource-advisories)

* [/repository-security-advisories](/en/enterprise-server@3.22/repository-security-advisories)

* [Global security advisories](/en/enterprise-server@3.22/code-security/concepts/vulnerability-reporting-and-management/global-security-advisories)

  Global security advisories are CVEs and GitHub-originated advisories affecting the open source world, located in the GitHub Advisory Database.

* [Coordinated Disclosure of Security Vulnerabilities](/en/enterprise-server@3.22/coordinated-disclosure)

* [Exposure to vulnerabilities in your code and in dependencies](/en/enterprise-server@3.22/code-security/concepts/vulnerability-reporting-and-management/vulnerability-exposure)

  Understand how vulnerabilities in your own code and in third-party dependencies contribute to your organization's overall security exposure, and how to measure and reduce that risk.