Reference documentation for GraphQL schema types in the Security advisories category.
The Common Vulnerability Scoring System.
CVSSscore (Float!): The CVSS score associated with this advisory.vectorString (String): The CVSS vector string associated with this advisory.The Common Vulnerability Scoring System.
CvssSeveritiescvssV3 (CVSS): The CVSS v3 severity associated with this advisory.cvssV4 (CVSS): The CVSS v4 severity associated with this advisory.A common weakness enumeration.
Implements: Node
CWEcweId (String!): The id of the CWE.description (String!): A detailed description of this CWE.id (ID!): The Node ID of the CWE object.name (String!): The name of this CWE.The connection type for CWE.
CWEConnectionedges ([CWEEdge]): A list of edges.nodes ([CWE]): A list of nodes.pageInfo (PageInfo!): Information to aid in pagination.totalCount (Int!): Identifies the total count of items in the connection.An edge in a connection.
CWEEdgecursor (String!): A cursor for use in pagination.node (CWE): The item at the end of the edge.The Exploit Prediction Scoring System.
EPSSpercentage (Float): The EPSS percentage represents the likelihood of a CVE being exploited.percentile (Float): The EPSS percentile represents the relative rank of the CVE's likelihood of being exploited compared to other CVEs.GitHub Security Advisories.
Type: SecurityAdvisoryConnection!
securityAdvisoriesafter (String): Returns the elements in the list that come after the specified cursor.before (String): Returns the elements in the list that come before the specified cursor.classifications ([SecurityAdvisoryClassification!]): A list of classifications to filter advisories by.epssPercentage (Float): The EPSS percentage to filter advisories by.epssPercentile (Float): The EPSS percentile to filter advisories by.first (Int): Returns the first n elements from the list.identifier (SecurityAdvisoryIdentifierFilter): Filter advisories by identifier, e.g. GHSA or CVE.isWithdrawn (Boolean): Filter advisories by withdrawn status. True returns only withdrawn advisories. False excludes withdrawn advisories.last (Int): Returns the last n elements from the list.orderBy (SecurityAdvisoryOrder): Ordering options for the returned topics. Default: {field: UPDATED_AT, direction: DESC}.publishedSince (DateTime): Filter advisories to those published since a time in the past.severities ([SecurityAdvisorySeverity!]): A list of advisory severities to filter advisories by.updatedSince (DateTime): Filter advisories to those updated since a time in the past.A GitHub Security Advisory.
Implements: Node
SecurityAdvisoryclassification (SecurityAdvisoryClassification!): The classification of the advisory.
cveId (String): The Common Vulnerabilities and Exposures ID.
cvss (CVSS!): The CVSS associated with this advisory. Deprecated: cvss will be removed. New cvss_severities field will now contain both cvss_v3 and cvss_v4 properties. Removal on 2025-10-01 UTC.
cvssSeverities (CvssSeverities!): The CVSS associated with this advisory.
cwes (CWEConnection!): CWEs associated with this Advisory. (Pagination: after, before, first, last)
databaseId (Int): Identifies the primary key from the database.
description (String!): This is a long plaintext description of the advisory.
epss (EPSS): The Exploit Prediction Scoring System.
ghsaId (String!): The GitHub Security Advisory ID.
githubReviewedAt (DateTime): When the GitHub Security team reviewed this advisory, which may differ from when GitHub published it.
id (ID!): The Node ID of the SecurityAdvisory object.
identifiers ([SecurityAdvisoryIdentifier!]!): A list of identifiers for this advisory.
notificationsPermalink (URI): The permalink for the advisory's dependabot alerts page.
nvdPublishedAt (DateTime): When NVD published its advisory record, independent of GitHub's publishing timeline.
origin (String!): The organization that originated the advisory.
permalink (URI): The permalink for the advisory.
publishedAt (DateTime!): When GitHub published this advisory.
references ([SecurityAdvisoryReference!]!): A list of references for this advisory.
repositoryAdvisoryUrl (URI): The URL for the associated repository security advisory, if this global advisory is linked to a repository-level advisory.
severity (SecurityAdvisorySeverity!): The severity of the advisory.
sourceCodeLocation (URI): URL to the upstream source code relevant to the advisory.
summary (String!): A short plaintext summary of the advisory.
updatedAt (DateTime!): When the advisory was last updated.
vulnerabilities (SecurityVulnerabilityConnection!): Vulnerabilities associated with this Advisory.
after (String): Returns the elements in the list that come after the specified cursor.before (String): Returns the elements in the list that come before the specified cursor.classifications ([SecurityAdvisoryClassification!]): A list of advisory classifications to filter vulnerabilities by.ecosystem (SecurityAdvisoryEcosystem): An ecosystem to filter vulnerabilities by.first (Int): Returns the first n elements from the list.last (Int): Returns the last n elements from the list.orderBy (SecurityVulnerabilityOrder): Ordering options for the returned topics. Default: {field: UPDATED_AT, direction: DESC}.package (String): A package name to filter vulnerabilities by.severities ([SecurityAdvisorySeverity!]): A list of severities to filter vulnerabilities by.withdrawnAt (DateTime): When the advisory was withdrawn, if it has been withdrawn.
Fetch a Security Advisory by its GHSA ID.
Type: SecurityAdvisory
securityAdvisoryghsaId (String!): GitHub Security Advisory ID.Classification of the advisory.
SecurityAdvisoryClassificationGENERAL: Classification of general advisories.MALWARE: Classification of malware advisories.The connection type for SecurityAdvisory.
SecurityAdvisoryConnectionedges ([SecurityAdvisoryEdge]): A list of edges.nodes ([SecurityAdvisory]): A list of nodes.pageInfo (PageInfo!): Information to aid in pagination.totalCount (Int!): Identifies the total count of items in the connection.The possible ecosystems of a security vulnerability's package.
SecurityAdvisoryEcosystemACTIONS: GitHub Actions.COMPOSER: PHP packages hosted at packagist.org.ERLANG: Erlang/Elixir packages hosted at hex.pm.GO: Go modules.MAVEN: Java artifacts hosted at the Maven central repository.NPM: JavaScript packages hosted at npmjs.com.NUGET: .NET packages hosted at the NuGet Gallery.PIP: Python packages hosted at PyPI.org.PUB: Dart packages hosted at pub.dev.RUBYGEMS: Ruby gems hosted at RubyGems.org.RUST: Rust crates.SWIFT: Swift packages.An edge in a connection.
SecurityAdvisoryEdgecursor (String!): A cursor for use in pagination.node (SecurityAdvisory): The item at the end of the edge.A GitHub Security Advisory Identifier.
SecurityAdvisoryIdentifiertype (String!): The identifier type, e.g. GHSA, CVE.value (String!): The identifier.An advisory identifier to filter results on.
SecurityAdvisoryIdentifierFiltertype (SecurityAdvisoryIdentifierType!): The identifier type.value (String!): The identifier string. Supports exact or partial matching.Identifier formats available for advisories.
SecurityAdvisoryIdentifierTypeCVE: Common Vulnerabilities and Exposures Identifier.GHSA: GitHub Security Advisory ID.Ordering options for security advisory connections.
SecurityAdvisoryOrderdirection (OrderDirection!): The ordering direction.field (SecurityAdvisoryOrderField!): The field to order security advisories by.Properties by which security advisory connections can be ordered.
SecurityAdvisoryOrderFieldEPSS_PERCENTAGE: Order advisories by EPSS percentage.EPSS_PERCENTILE: Order advisories by EPSS percentile.PUBLISHED_AT: Order advisories by publication time.UPDATED_AT: Order advisories by update time.An individual package.
SecurityAdvisoryPackageecosystem (SecurityAdvisoryEcosystem!): The ecosystem the package belongs to, e.g. RUBYGEMS, NPM.name (String!): The package name.An individual package version.
SecurityAdvisoryPackageVersionidentifier (String!): The package name or version.A GitHub Security Advisory Reference.
SecurityAdvisoryReferenceurl (URI!): A publicly accessible reference.Severity of the vulnerability.
SecurityAdvisorySeverityCRITICAL: Critical.HIGH: High.LOW: Low.MODERATE: Moderate.UNKNOWN: Unknown.Software Vulnerabilities documented by GitHub Security Advisories.
Type: SecurityVulnerabilityConnection!
securityVulnerabilitiesafter (String): Returns the elements in the list that come after the specified cursor.before (String): Returns the elements in the list that come before the specified cursor.classifications ([SecurityAdvisoryClassification!]): A list of advisory classifications to filter vulnerabilities by.ecosystem (SecurityAdvisoryEcosystem): An ecosystem to filter vulnerabilities by.first (Int): Returns the first n elements from the list.last (Int): Returns the last n elements from the list.orderBy (SecurityVulnerabilityOrder): Ordering options for the returned topics. Default: {field: UPDATED_AT, direction: DESC}.package (String): A package name to filter vulnerabilities by.severities ([SecurityAdvisorySeverity!]): A list of severities to filter vulnerabilities by.An individual vulnerability within an Advisory.
SecurityVulnerabilityadvisory (SecurityAdvisory!): The Advisory associated with this Vulnerability.firstPatchedVersion (SecurityAdvisoryPackageVersion): The first version containing a fix for the vulnerability.package (SecurityAdvisoryPackage!): A description of the vulnerable package.severity (SecurityAdvisorySeverity!): The severity of the vulnerability within this package.updatedAt (DateTime!): When the vulnerability was last updated.vulnerableVersionRange (String!): A string that describes the vulnerable package versions.= 0.2.0 denotes a single vulnerable version.
<= 1.0.8 denotes a version range up to and including the specified version
< 0.1.11 denotes a version range up to, but excluding, the specified version
= 4.3.0, < 4.3.5 denotes a version range with a known minimum and maximum version.
= 0.0.1 denotes a version range with a known minimum, but no known maximum.
The connection type for SecurityVulnerability.
SecurityVulnerabilityConnectionedges ([SecurityVulnerabilityEdge]): A list of edges.nodes ([SecurityVulnerability]): A list of nodes.pageInfo (PageInfo!): Information to aid in pagination.totalCount (Int!): Identifies the total count of items in the connection.An edge in a connection.
SecurityVulnerabilityEdgecursor (String!): A cursor for use in pagination.node (SecurityVulnerability): The item at the end of the edge.Ordering options for security vulnerability connections.
SecurityVulnerabilityOrderdirection (OrderDirection!): The ordering direction.field (SecurityVulnerabilityOrderField!): The field to order security vulnerabilities by.Properties by which security vulnerability connections can be ordered.
SecurityVulnerabilityOrderFieldUPDATED_AT: Order vulnerability by update time.