content/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-global-security-advisories.md

metadata

title: About global security advisories
intro: >-
  Global security advisories live in the {% data
  variables.product.prodname_advisory_database %}, a collection of CVEs and {%
  data variables.product.company_short %}-originated advisories affecting the
  open source world. You can contribute to improving global security advisories.
versions:
  fpt: '*'
  ghec: '*'
  ghes: '*'
type: overview
topics:
  - Security advisories
  - Alerts
  - Vulnerabilities
  - CVEs
redirect_from:
  - >-
    /code-security/security-advisories/global-security-advisories/about-global-security-advisories

About global security advisories

{% ifversion fpt or ghec %}There are two types of advisories: global security advisories and repository security advisories. For more information about repository security advisories, see AUTOTITLE.{% endif %}

Global security advisories are grouped into these categories: {% data variables.product.company_short %}-reviewed advisories, unreviewed advisories, and malware advisories.

• {% data reusables.advisory-database.github-reviewed-overview %}
• {% data reusables.advisory-database.unreviewed-overview %}
• {% data reusables.advisory-database.malware-overview %}

{% data variables.product.prodname_dependabot %} doesn't generate {% data variables.product.prodname_dependabot_alerts %} for unreviewed and malware advisories.

For more information about the {% data variables.product.prodname_advisory_database %}, see AUTOTITLE.

{% data reusables.security-advisory.global-advisories %}

Every repository advisory is reviewed by the {% data variables.product.prodname_security %} curation team for consideration as a global advisory. We publish security advisories for any of the ecosystems supported by the dependency graph to the {% data variables.product.prodname_advisory_database %} on github.com/advisories.

You can access any advisory in the {% data variables.product.prodname_advisory_database %}. For more information, see AUTOTITLE.

You can suggest improvements to any advisory in the {% data variables.product.prodname_advisory_database %}. For more information, see AUTOTITLE.