# Concepts for vulnerability reporting and management

Learn core concepts relating to vulnerability reporting and management on GitHub.

## Links

* [GitHub Advisory database](/en/code-security/concepts/vulnerability-reporting-and-management/github-advisory-database)

  Research known security vulnerabilities and malware in open source packages, so you can understand and remediate the risks in your dependencies.

* [Innersource advisories](/en/code-security/concepts/vulnerability-reporting-and-management/innersource-advisories)

  Enterprises can alert their internal repositories to vulnerabilities and ship automated fixes with Dependabot, using advisories that stay private to a single enterprise.

* [Repository security advisories](/en/code-security/concepts/vulnerability-reporting-and-management/repository-security-advisories)

  You can use repository security advisories to privately discuss, fix, and publish information about security vulnerabilities in your public repository.

* [Global security advisories](/en/code-security/concepts/vulnerability-reporting-and-management/global-security-advisories)

  Global security advisories are CVEs and GitHub-originated advisories affecting the open source world, located in the GitHub Advisory Database.

* [Coordinated disclosure of security vulnerabilities](/en/code-security/concepts/vulnerability-reporting-and-management/coordinated-disclosure)

  Vulnerability disclosure is a coordinated effort between security reporters and repository maintainers.

* [Exposure to vulnerabilities in your code and in dependencies](/en/code-security/concepts/vulnerability-reporting-and-management/vulnerability-exposure)

  Understand how vulnerabilities in your own code and in third-party dependencies contribute to your organization's overall security exposure, and how to measure and reduce that risk.