Record · corpus.blog/posts/01a0c56f-951f-71ae-aaf7-3db635088ca1

A year of open source vulnerability trends: CVEs, advisories, and malware

GitHub · published 26 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at github.blog Wayback capture

1blogs citing

First cited: 3 Jun 2026
Most recent: 3 Jun 2026
Rank this month: not ranked
Links from this post: 18
Words captured: 1,346

Cited by

Blog

In the post

Date

Docker Engineering

What is Software Supply Chain Security? Read at the source ↗

3 Jun 2026

Links from this post

Link

Host

https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database

docs.github.com

https://docs.github.com/en/code-security/concepts/vulnerability-reporting-and-management/about-the-github-advisory-database

docs.github.com

https://github.com/advisories

github.com

https://github.blog/security/github-advisory-database-by-the-numbers-known-security-vulnerabilities-and-what-you-can-do-about-them/

github.blog

https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/editing-security-advisories-in-the-github-advisory-database

docs.github.com

https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/customizing-auto-triage-rules-to-prioritize-dependabot-alerts

docs.github.com

https://www.first.org/cvss/

first.org

https://www.first.org/epss/

first.org

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

cisa.gov

https://github.blog/security/supply-chain-security/strengthening-supply-chain-security-preparing-for-the-next-malware-campaign/

github.blog

https://github.blog/changelog/2022-06-15-advisory-database-supports-malware-advisories/

github.blog

https://github.blog/changelog/2026-03-17-dependabot-now-detects-malware-in-npm-dependencies/

github.blog

https://www.cve.org/PartnerInformation/ListofPartners/partner/GitHub_M

cve.org

https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/publishing-a-repository-security-advisory

docs.github.com

https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates

docs.github.com

https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security

docs.github.com

https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/adding-a-security-policy-to-your-repository

docs.github.com

https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/configuring-private-vulnerability-reporting-for-a-repository

docs.github.com