A weakness in software that an attacker can exploit to compromise a system.
A vulnerability is a defect in software — a missing bounds check, a broken authorization path, an unsafe deserialization — that an attacker can leverage to do something the software never intended: execute code, read secrets, escalate privileges, or take the service down.
In open source, vulnerabilities matter twice: once in the code you write, and again in the hundreds of packages you depend on. Safeguard Gold continuously tracks disclosed vulnerabilities across ecosystems and maps them to the exact package versions they affect, so you know whether an upgrade is urgent or routine.