GitHub Advisory Database
A vulnerability advisory database maintained by GitHub, covering major package ecosystems. It provides machine-readable metadata on affected versions and integrates with Dependabot for automated upgrades.
Core Facts
Timeline (last 90 days)
Teams should follow the GitHub Advisory Database, the NVD, and official project security advisories as authoritative sources of vulnerability information.
The GitHub Advisory Database is a vulnerability advisory database maintained by GitHub, covering major package ecosystems such as npm, PyPI, Go and RubyGems.
All Facts (3)
GitHub's Dependabot tool automatically detects known vulnerabilities based on the GitHub Advisory Database and creates Pull Requests to update dependency versions that pose risks.
75%UnverifiedTeams should follow the GitHub Advisory Database, the NVD, and official project security advisories as authoritative sources of vulnerability information.
50%UnverifiedThe GitHub Advisory Database is a vulnerability advisory database maintained by GitHub, covering major package ecosystems such as npm, PyPI, Go and RubyGems.
50%