Security advisories

Returns the elements in the list that come after the specified cursor.

Returns the elements in the list that come before the specified cursor.

A list of classifications to filter advisories by.

The EPSS percentage to filter advisories by.

The EPSS percentile to filter advisories by.

Returns the first n elements from the list.

Returns the last n elements from the list.

Filter advisories to those published since a time in the past.

Filter advisories to those updated since a time in the past.

GitHub Security Advisory ID.

Returns the elements in the list that come after the specified cursor.

Returns the elements in the list that come before the specified cursor.

A list of advisory classifications to filter vulnerabilities by.

An ecosystem to filter vulnerabilities by.

Returns the first n elements from the list.

Returns the last n elements from the list.

A package name to filter vulnerabilities by.

A list of severities to filter vulnerabilities by.

The CVSS score associated with this advisory.

The CVSS vector string associated with this advisory.

The CVSS v3 severity associated with this advisory.

The CVSS v4 severity associated with this advisory.

The id of the CWE.

A detailed description of this CWE.

The Node ID of the CWE object.

The name of this CWE.

A list of edges.

A list of nodes.

Information to aid in pagination.

Identifies the total count of items in the connection.

A cursor for use in pagination.

The item at the end of the edge.

The EPSS percentage represents the likelihood of a CVE being exploited.

The EPSS percentile represents the relative rank of the CVE's likelihood of being exploited compared to other CVEs.

The classification of the advisory.

The CVSS associated with this advisory.

The CVSS associated with this advisory.

CWEs associated with this Advisory.

Identifies the primary key from the database.

This is a long plaintext description of the advisory.

The Exploit Prediction Scoring System.

The GitHub Security Advisory ID.

The Node ID of the SecurityAdvisory object.

A list of identifiers for this advisory.

The permalink for the advisory's dependabot alerts page.

The organization that originated the advisory.

The permalink for the advisory.

When the advisory was published.

A list of references for this advisory.

The severity of the advisory.

A short plaintext summary of the advisory.

When the advisory was last updated.

Vulnerabilities associated with this Advisory.

When the advisory was withdrawn, if it has been withdrawn.

A list of edges.

A list of nodes.

Information to aid in pagination.

Identifies the total count of items in the connection.

A cursor for use in pagination.

The item at the end of the edge.

The identifier type, e.g. GHSA, CVE.

The identifier.

The ecosystem the package belongs to, e.g. RUBYGEMS, NPM.

The package name.

The package name or version.

A publicly accessible reference.

The Advisory associated with this Vulnerability.

The first version containing a fix for the vulnerability.

A description of the vulnerable package.

The severity of the vulnerability within this package.

When the vulnerability was last updated.

A string that describes the vulnerable package versions. This string follows a basic syntax with a few forms.

• = 0.2.0 denotes a single vulnerable version.
• <= 1.0.8 denotes a version range up to and including the specified version
• < 0.1.11 denotes a version range up to, but excluding, the specified version
• >= 4.3.0, < 4.3.5 denotes a version range with a known minimum and maximum version.
• >= 0.0.1 denotes a version range with a known minimum, but no known maximum.

A list of edges.

A list of nodes.

Information to aid in pagination.

Identifies the total count of items in the connection.

A cursor for use in pagination.

The item at the end of the edge.