GitHub Advisory Database by the numbers: Known security vulnerabilities and what you can do about them

GitHub’s 2024 Advisory Database report summarizes growth and trends in the advisory corpus—including over 22,000 reviewed advisories, ecosystem distribution (notably Maven, Composer, npm, pip, Go), source breakdown (NVD, repository advisories, community, specialized sources), CWE rankings, EPSS-based prioritization guidance, and GitHub’s role as a CVE Numbering Authority—providing operational guidance for prioritizing and remediating open-source vulnerabilities rather than describing any specific security incident.