GitHub Open Source Vulnerability Report: Reviewed Advisories Hit 4-Year Low While Malware Advisories Surge

GitHub Blog·medium signalXBlueskyLinkedInCopy link

GitHub's annual vulnerability trends report shows reviewed security advisories dropped to a four-year low while malware advisories surged significantly. CNA (CVE Numbering Authority) publishing grew, indicating more organizations are directly disclosing vulnerabilities. The divergence between declining traditional CVEs and rising malware suggests attackers are shifting from exploiting known vulnerabilities to supply chain poisoning and dependency confusion attacks.