A 2024 analysis by Black Duck Software of 965 commercial codebases across 16 industries revealed a staggering 86% contained open-source software vulnerabilities, with 81% labeled as high or critical risks. Furthermore, 90% of the audited codebases had components exceeding four years in age. The study also showed that the average application has tripled its number of open-source files within four years. Developers face challenges in addressing these vulnerabilities due to time constraints and fear of breaking applications through updates, underscoring the importance of proactive code testing to enhance software security.
An analysis of 965 commercial codebases across 16 industries found that 86% contained open-source software vulnerabilities, with 81% categorized as high or critical risks.
The reliance on outdated open-source components is alarming; 90% of audited codebases had elements over four years old, leading to significant security concerns.
Black Duck's report revealed that the average application has tripled its open-source files in four years, pointing to a growing complexity in maintaining software security.
Mike McGuire emphasized the overwhelming challenge developers face with the volume of vulnerabilities, noting that critical updates are often neglected due to time constraints.
Collection
[
|
...
]