Feeds2.Feedburner Surge in Open-Source Vulnerabilities in Commercial Codebases
Article Content
Browse articles 
The 2026 Open Source Security and Risk Analysis report by Black Duck reveals a 107% increase in open-source vulnerabilities in commercial codebases from 2023 to 2024. The average number of vulnerabilities per codebase rose from 280 to 581, driven by a 74% increase in codebase size and a 30% rise in open-source components. Nearly all audited codebases now contain open-source components, heightening security exposure.
Ask AI about this cluster
Answers cite the sources they use
Updated 222d ago How this analysis works
Timeline
2020-04-29
CVE-2020-11023 published
2020-04-29
CVE-2020-11022 published
2024-01-01
Average vulnerabilities per codebase increased from 280 to 581
2024-01-01
Average number of files per codebase increased by 74%
2024-01-01
Average number of open-source components increased by 30%
2026-02-26
Black Duck's 2026 OSSRA report published
More articles in this cluster (2)
Following this threat?
Track CVE-2020-11022 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
,p_Ii9kYXRhYmFzZS93b3JkcHJlc3MvcGx1Z2luL3NpdGVza2l0ZS92dWxuZXJhYmlsaXR5L3dvcmRwcmVzcy1zaXRlc2tpdGUtcGx1Z2luLTItMS04LXJlbW90ZS1jb2RlLWV4ZWN1dGlvbi1yY2UtdnVsbmVyYWJpbGl0eSI,s__DbMe5dVBwz8g5hf.png)
Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…