Submission + - At least one open source vulnerability found in 84% of code bases (csoonline.com)
L.Kynes writes: Almost all applications contain at least some open source code, and 48% of all code bases examined by Synopsys researchers contained high-risk vulnerabilities, which are those that have been actively exploited, already have documented proof-of-concept exploits, or are classified as remote code execution vulnerabilities.
At a time when almost all software contains open source code, at least one known open source vulnerability was detected in 84% of all commercial and proprietary code bases examined by researchers at application security company Synopsys.
The vulnerability data — along with information on open source license compliance — was included in Synopsys' 2023 Open Source Security and Risk Analysis (OSSRA) report, put together by the company's Cybersecurity Research Center (CyRC).
The annual OSSRA report represents CyRC findings from the previous year's data. Of the 1,703 codebases that Synopsys audited in 2022, 96% of them contained open source. Aerospace, aviation, automotive, transportation, logistics; EdTech; and Internet of Things are three of the 17 industry sectors included in the report that had open source in 100% of their audited codebases. In the remaining verticals, over 92% of the codebases contained open source.
At a time when almost all software contains open source code, at least one known open source vulnerability was detected in 84% of all commercial and proprietary code bases examined by researchers at application security company Synopsys.
The vulnerability data — along with information on open source license compliance — was included in Synopsys' 2023 Open Source Security and Risk Analysis (OSSRA) report, put together by the company's Cybersecurity Research Center (CyRC).
The annual OSSRA report represents CyRC findings from the previous year's data. Of the 1,703 codebases that Synopsys audited in 2022, 96% of them contained open source. Aerospace, aviation, automotive, transportation, logistics; EdTech; and Internet of Things are three of the 17 industry sectors included in the report that had open source in 100% of their audited codebases. In the remaining verticals, over 92% of the codebases contained open source.
