| CARVIEW |
?????uCVSS?ŏd?偨?C???}???v?͌??E?@?u???Ή??v?Ǝ㐫??9?????炷GitHub?????̗D?揇?ʕt????Fnpm?}???E?F?A?A?h?o?C?U???????L?^?I??????
GitHub?͎??Ђ́uAdvisory Database?v?̃f?[?^????ɁA2025?N??OSS?̐Ǝ㐫?????Ɋւ??郌?|?[?g?\?????B
???̋L???͉??????ł??B????o?^?i?????j????ƑS?Ă????????????܂??B
?@GitHub??2026?N3??26???i?č????ԁj?A???Ђ??^?c????uGitHub Advisory Database?v?̃f?[?^????ɁA2025?N?̃I?[?v???\?[?X?\?t?g?E?F?A?iOSS?j?̐Ǝ?i???????Ⴍ?j???????Ɋւ??郌?|?[?g?\?????B???r???[?ς݃A?h?o?C?U???̐??ځA?G?R?V?X?e???ʂ̕??z?A?}???E?F?A?A?h?o?C?U???̋}???A?Ǝ㐫?̎?ށACVE?iCommon Vulnerabilities and Exposures?j?̔ԋ@?ցiCNA?j?Ƃ??Ă̊??????тȂǂ???Ă???B
GitHub Advisory Database?Ƃ́H
?@GitHub Advisory Database?i?A?h?o?C?U???f?[?^?x?[?X?j??2019?N?̊J?݈ȗ??AOSS?p?b?P?[?W?ɉe?????y?ڂ????m?̃Z?L?????e?B?Ǝ㐫?ƃ}???E?F?A?̕?I?ȃ??X?g????Ă???B???̃f?[?^?x?[?X?Ɋ܂܂??A?h?o?C?U???́A?ȉ??̃\?[?X????lj????ꂽ???̂??B
- GitHub?ŕ??ꂽ?Z?L?????e?B?A?h?o?C?U??
- National Vulnerability Database?iNVD?F?Ǝ㐫???f?[?^?x?[?X?j
- npm?Z?L?????e?B?A?h?o?C?U???f?[?^?x?[?X
- FriendsOfPHP?f?[?^?x?[?X
- Go Vulncheck?f?[?^?x?[?X
- GitHub Packaging Advisory?f?[?^?x?[?X
- Ruby Advisory?f?[?^?x?[?X
- ?R?~???j?e?B?[?̃R?[?h??
?@GitHub Advisory Database?̃Z?L?????e?B?A?h?o?C?U???́AOSS?Ǝ㐫?iOSV?j?`????JSON?t?@?C???Ƃ??Č??J????Ă???A?ȉ???3??ނ?????B
GitHub?????r???[?ς݂̃A?h?o?C?U???iGitHub-reviewed advisories?j
?@GitHub???T?|?[?g????G?R?V?X?e???̃p?b?P?[?W?Ɋ֘A?t?????Ă???BGitHub?̐??`?[?????L??????T?d?Ƀ??r???[???A?????ƃG?R?V?X?e??????уp?b?P?[?W?̏????܂?ł??邱?Ƃ??m?F?ς݂̐Ǝ㐫?????w???B
?@?J???҂?GitHub?́uDependabot?v?c?[???̃A???[?g??GitHub???|?W?g???ɑ??ėL???ɐݒ肷??ƁA?ˑ?????p?b?P?[?W?̐Ǝ㐫???V???????r???[?ς݃A?h?o?C?U???ŕ??ꂽ?ꍇ?A?????I?ɒʒm??????Ƃ????B
?????r???[?A?h?o?C?U???iunreviewed advisories?j
?@NIST?i?č??????W???Z?p???????j??NVD?̃t?B?[?h???玩???I?Ɏ?荞?܂ꂽ?A?h?o?C?U???B?u?????r???[?v?Ƃ??????O?͂?????????????A???̃A?h?o?C?U???́AGitHub?̃A?i???X?g???ڂ?ʂ?????ŁA?uGitHub?̃T?|?[?g?ΏۃG?R?V?X?e???ɊY?????Ȃ??v?u?L???ȐƎ㐫?ɊY?????Ȃ??v?Ɣ??f???????̂??唼???߂Ă???B
?}???E?F?A?A?h?o?C?U???imalware advisories?j
?@?}???E?F?A?ɂ???Ĉ????N???????Ǝ㐫?Ɋ֘A???Ă???Anpm?G?R?V?X?e???Ɍ??肳???Bnpm?Z?L?????e?B?`?[???????W??????????Ɏ??????J?????B
???r???[?ς݃A?h?o?C?U???̃G?R?V?X?e???ʕ??z
?@2025?N?̃??r???[?ς݃A?h?o?C?U???̑?????4101???ɂƂǂ܂?A2021?N?ȗ?4?N?Ԃ?̒ᐅ???ƂȂ????B???????A?????OSS?̃R?[?h?????S?ɂȂ???????ł͂Ȃ??B???̌????́A?Â??Ǝ㐫?A?h?o?C?U?????????̂ڂ??ă??r???[???銈?????????㊮???????邩?炾?B??L?̃\?[?X????̃t?B?[?h?ŐV?K?ɕ??ꂽ?Ǝ㐫?Ɍ???A???r???[?ς݃A?h?o?C?U?????͑????̈?r?????ǂ??Ă???A2025?N?͑O?N??19??????3734???ƂȂ????B
?@?Â??Ǝ㐫?ƐV?????t?B?[?h?̃??r???[?ς݃A?h?o?C?U???????̗v???A??т??đ??????Ă???A2025?N??2??4668???ɒB?????B
?@2025?N???r???[?ς݃A?h?o?C?U?????̃G?R?V?X?e???ʕ??z???AGitHub Advisory Database?S?̂̃??r???[?ς݃A?h?o?C?U?????̉ߋ??v???z?Ɣ?ׂ?ƁA???L2?̃O???t?̂悤?ɁA?قړ????????A?uGo?v??????2025?N?̊??????ˏo???č????i??6?|?C???g???j?B?????GitHub?????ŁA?????Ƃ???Ă????\????????A?h?o?C?U???̍Č??????d?_?I?ɐi?߂????ʂ??B
npm?}???E?F?A?A?h?o?C?U???????L?^?I??????
?@2025?N??npm?}???E?F?A?A?h?o?C?U???????O?N???69?????????A7197???ɒB?????BGitHub???}???E?F?A?A?h?o?C?U???̒ǐՂ??J?n????2022?N?i7433???j?ɔ??鐅?????B?uShai-Hulud?v???͂??߂Ƃ????K?͂ȃ}???E?F?A?U???L?????y?[????????ƂȂ????B
?Ǝ㐫?̎?ނ̕ω???CWE?̃^?O?t???i???̌???
?@?Ǝ㐫?̕??ނ?????CWE?iCommon Weakness Enumeration?F???ʐƎ㐫?^?C?v?j?ʂł́A2025?N???N???X?T?C?g?X?N???v?e?B???O?iXSS?j?iCWE-79?j??672???ōő????ێ????A3?N?A???̃g?b?v?ƂȂ????B2?ʂɁu?f?B???N?g???^?p?X?g???o?[?T???v?iCWE-22 ?j?A3?ʂɁu?s???ȔF?v?iCWE-863?j?Ƒ????Ă???B
?@????A2025?N??2024?N??ő傫?????ʂ??グ???Ǝ㐫??????B?u???\?[?X?͊??v?iCWE-400?ACWE-770?j?A?u???S?łȂ??V???A???C?Y?????v?iCWE-502?j?A?u?T?[?o?T?C?h???N?G?X?g?t?H?[?W?F???v?iCWE-918?j?Ȃǂ??B3?ʂ?CWE-863?͏??ʂ?9?㏸???????A?????CWE?̕??ޕύX????????B
2025?N?ɂ?????Ǝ㐫?̎?ޕʂ̃A?h?o?C?U?????i?FGitHub?j???F1?̃A?h?o?C?U???ɕ?????CWE???܂܂??ꍇ?A???̃A?h?o?C?U???͂??ꂼ???CWE?ɉ??Z?????
?@2025?N?ɂ́ACWE?̃^?O?t???̐??x?ƈ?ѐ??????サ???BCWE?????L?ڂ̃A?h?o?C?U???́A2024?N??452??????85?????????A65???ƂȂ????B????ɁA?u?s?K?ȓ??͌??v?iCWE-20?j?́A?]???͒P?ƂŋL?ڂ???邱?Ƃ????????????A??̓I?ȏ?Q???[?h?????????lj???CWE?^?O?????L?????P?[?X???????A?g???A?[?W??D?揇?ʕt???Ɋ??p???₷???f?[?^?ƂȂ????B
CVSS????????Ȃ??A?u?d??v?ȐƎ㐫?A?h?o?C?U????9?????炷?D?揇?ʕt???
?@GitHub?́A?A???[?g?̋}????w?i?ɁA?uCVSS?v?ƁuEPSS?v?Ƃ???2?̃X?R?A?????O?V?X?e?????g?p???āA?Ή??̗D?揇?ʂ?ݒ肷?邱?Ƃ????߂Ă???B
- CVSS?iCommon Vulnerability Scoring System?F???ʐƎ㐫?]???V?X?e???j?F?Ǝ㐫?̉e?????ǂ?قǐ[??????]??????
- EPSS?iExploit Prediction Scoring System?F?G?N?X?v???C?g?\???X?R?A?????O?V?X?e???j?F????30???ȓ??ɐƎ㐫???U???????\???𑪒肷??
?@?Ⴆ?ACVSS?Łu?d??v?ȐƎ㐫?A?h?o?C?U????392???????邪?AEPSS????11???Ƃ??????ʂɂȂ??Ă???B
?@?????̃X?R?A???r???邱?ƂŁA?ł??????????????Ђ??????炷?Ǝ㐫?Ƀ??\?[?X???W???ł???Ƃ????B
GitHub CNA?̐???
?@GitHub??CNA?Ƃ??āA?Ǝ㐫??CVE???ʎq?????蓖?āA???J???Ă???B2025?N??CVE???J????2903???ɒB???A?O?N???35?????????BCVE?v???W?F?N?g?S?̂̑?????21????啝?ɏ???y?[?X???B
?@2025?N??GitHub??CNA?T?[?r?X?𗘗p????CVE ID??\???????V?K?g?D?̐????A2024?N??568????20???????A679?ɒB?????B2025?N??GitHub CNA??CVE?????J?????g?D?̑?????987?ƂȂ????B
?֘A?L??
Claude Mythos?̓p???h???̔????@?ŐVAI???f?????????N?????ʎ????̃Z?L?????e?B???O
Anthropic?̍ŐVAI???f???uClaude Mythos Preview?v???Z?L?????e?B??̑傫?ȋc?_???????N?????Ă???B???Ђ͂??̃??f???ʃ????[?X?????AGlasswing?Ƃ????R???\?[?V?A???𗧂??グ?A?v??????????ƁE?g?D?ɑ??Ă̂ݒ??邱?Ƃ𖾂炩?ɂ????BMythos???߂????A?̌o?܂ɂ??Ă܂Ƃ߂??B
?u?q??Ђ̌Â?VPN???u?v?͉??_???X?N?H?@?U???҂???ɓ??????߂̃Z?L?????e?B?g?D??x?h?Đv?p
2025?N11??27???A?T?C?o?[?Z?L?????e?B?A?h?o?C?U?[?Ƃ??Ċ??閼?a???j?????uASM???ӎv????G???W???ցF?D??x?쓮?̔\???I?h??v?Ƒ肵?āuITmedia Security Week 2025 ?H?v?ōu???????B
?u?F?̌????v??4?ʂɋ}????@?u?ł??댯?ȐƎ㐫Top 25?vMITRE?????J
MITRE?̓\?t?g?E?F?A?ɂ?????댯?ȐƎ㐫?^?C?v???܂Ƃ߂??uCWE Top 25 Most Dangerous Software Weaknesses?v??2025?N?ł\?????BWeb?A?v???P?[?V?????֘A?̐Ǝ㐫??Top 3??Ɛ肷?錋?ʂƂȂ????B
?Ǝ㐫?𑬂₩?Ɍ??\???Ȃ??y?́A?킽?????????s???????܂???I
???Z?L?????e?B?̌[????ڎw?????A?Z?p?n?R???f?B?[???吧??A?j???u?????????I?v?́?IT?o?[?W?????B??53??Ԃ́u?Ǝ㐫???????Ƃ??̑Ώ??@ ???ҁv?ł??B?????̃}???K?̓t?B?N?V?????ł??B
?Ǝ㐫?Ǘ??́u???????v??????????|?C???g?Ƃ́H?@???҂?S???҂̋c?_?Ɋw?ԁA?Ǝ㐫?Ǘ??̐??\?z?̃q???g
2024?N11???ɊJ?Â??ꂽInternet Week 2024?ł́u?Ǝ㐫?Ǘ??͕K?v?s???????ǁA?ǂ??i?߂????????????Ȃ??v?Ƃ????ۑ???e?[?}?ɁA?u???҂?Q???ғ??m?ŋc?_????BoF???J?Â??ꂽ?B
?֘A?????N
Copyright © ITmedia, Inc. All Rights Reserved.
?A?C?e?B???f?B?A????̂??m?点
??IT eBook
???ڂ̃e?[?}
?ҏW??????̂??m?点
RSS?ɂ???
?A?C?e?B???f?B?AID?ɂ???
???[???}?K?W???o?^
??IT?̃??[???}?K?W???́A ???????A???ׂĖ????ł??B???Ѓ??[???}?K?W???????w?ǂ????????B
ITmedia?̓A?C?e?B???f?B?A??????Ђ̓o?^???W?ł??B
???f?B?A?ꗗ | ????SNS | ?L???ē? | ???₢???킹 | ?v???C?o?V?[?|???V?[ | RSS | ?^?c??? | ?̗p??? | ??????