[MCAFEE]Vulnerability Discovery in Open Source Libraries Part 1: Tools of the Trade

[igor51]

Vulnerability Discovery in Open Source Libraries Part 1: Tools of the Trade

Executive Summary Open source has become the foundation for modern software development. Vendors use open source software to stay competitive and improve the speed, quality, and cost of the development process. At the same time, it is critical to maintain and audit open source libraries used in products as they can expose a significant volume […]

The post Vulnerability Discovery in Open Source Libraries Part 1: Tools of the Trade appeared first on McAfee Blogs.

Source: Vulnerability Discovery in Open Source Libraries Part 1: Tools of the Trade

[Tawal]

Furthermore, the 2020 Open Source Security Risk and Analysis report states that out of the applications audited in 2019, 99% of codebases contained open source components and 75% of codebases contained vulnerabilities, with 49% of codebases containing high risk vulnerabilities.

Ouch ! Incredible !