{"id":46164,"date":"2022-04-12T17:29:31","date_gmt":"2022-04-12T17:29:31","guid":{"rendered":"https:\/\/www.darkreading.com\/application-security\/80-of-software-codebases-contain-at-least-one-vulnerability"},"modified":"2022-04-12T17:29:31","modified_gmt":"2022-04-12T17:29:31","slug":"80-of-software-codebases-contain-at-least-one-vulnerability","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/","title":{"rendered":"80% of Software Codebases Contain at Least One Vulnerability"},"content":{"rendered":"<p>Open source software&#8217;s share of the typical codebase grew to 78% in 2021, yet companies continued to use components that are&nbsp;out of date and no longer maintained, leaving their software potentially vulnerable, a new study shows.<\/p>\n<p>The vast majority of software codebases contain at least one vulnerability (81%), use an open source component that is&nbsp;more than four years out of date (85%), and contain components that have had&nbsp;no development in the past two years (88%), according to Synopsys&#8217; annual &#8220;Open Source Software Risk Analysis&#8221; (OSSRA) report, published this week. However, many of the data points show improvement over last year, when 84% of codebases had at least one vulnerability and 91% had no development activity in the previous two years.<\/p>\n<p>Overall, the data suggests that companies are just starting to make headway against vulnerabilities and there is still a long way to go, says Tim Mackey, principal security strategist at Synopsys.<\/p>\n<p>&#8220;This whole of idea [of] people trying to get their act together around what they would do from a software supply chain perspective is resonating to some extent, but it is not yet at a point where it is making a big dent in big things,&#8221; he says. With many of these open source components, &#8220;people are not saying, I&#8217;m going to use [component X,] it is coming along for the ride with some other library that they are using.&#8221;<\/p>\n<figure>\n<picture><source type=\"image\/webp\" media=\"(max-width: 576px)\" srcset=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=480&amp;quality=80&amp;format=webply&amp;disable=upscale\"><source type=\"image\/webp\" media=\"(max-width: 767px)\" srcset=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\"><source type=\"image\/webp\" media=\"(min-width: 768px)\" srcset=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\"><source type=\"image\/jpeg\" srcset=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=jpg&amp;disable=upscale\"><img decoding=\"async\" data-image=\"u0u78gw96zcc\" src=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\" data-sys-asset-uid=\"blt60503fd54e83367f\" alt=\"Vulnerabilities in open-source code\">\n<\/picture><figcaption>Source: Synopsys 2022 &#8220;Open Source Security Risk Analysis&#8221; (OSSRA) report<\/figcaption><\/figure>\n<p>The <a href=\"https:\/\/www.synopsys.com\/blogs\/software-security\/open-source-trends-ossra-report\/\" target=\"_blank\" rel=\"noopener\">Synopsys report<\/a> is a unique look into the state of software security and license compliance, as the data comes exclusively&nbsp;from the company&#8217;s service for due diligence that typically takes place during mergers and acquisitions (M&amp;A). In 2021, the number of M&amp;As surged 24% due to intense competition between corporate acquirers, private equity firms, and special-purpose acquisition companies (SPACs), <a href=\"https:\/\/www.pwc.com\/gx\/en\/services\/deals\/trends.html\" target=\"_blank\" rel=\"noopener\">according to consulting firm PricewaterhouseCoopers<\/a>. The increased activity led to a surge in scanning codebases. Synopsys scanned more than 2,400 commercial codebases across 17 industries, a growth of 64%, according to the report. <\/p>\n<p>Overall, the company saw improvements in lowering the number of high-risk vulnerabilities in audited codebases, with a significant decrease in the prevalence of top-10&nbsp;high-risk vulnerabilities, the report stated. In the 2020 data, for example, 29% of <a href=\"https:\/\/www.darkreading.com\/application-security\/dependency-problems-increase-for-open-source-components\" target=\"_blank\" rel=\"noopener\">codebases had components exposing the most prevalent vulnerability<\/a>, while the 2021 data in this year&#8217;s report identified the most prevalent high-risk vulnerability in only 8% of codebases.<\/p>\n<p>&#8220;All reoccurring high-risk vulnerabilities saw significant decreases,&#8221; the report states. &#8220;Prompt identification, prioritization, and mitigation of high-risk vulnerabilities can help teams address the risks that pose the greatest threat to their organizations.&#8221;<\/p>\n<p><strong>Open Source&#8217;s Persistent Spread<br \/><\/strong>The improvements come as companies continue to deepen their use of open source software. In 2019, open source accounted for 70% of the codebases audited by Synopsys, climbing to 75% last year. Now at 78%, the security of a company&#8217;s software overwhelmingly depends on the state of the open source components used by their development teams. <\/p>\n<p>Yet the quality of open source software projects continues to be uneven, especially when it comes to security. For example, almost a quarter of software projects (23%) have only a single developer contributing the bulk of the code, potentially posing a risk to companies that use the library as a component of their own software, according to&nbsp;the report. <\/p>\n<p>Unfortunately, companies have not&nbsp;eliminated the most significant risks from open source components and dependencies. With 88% of codebases containing outdated versions \u2014&nbsp;components for which there is an update that has yet to be applied \u2014 organizations need to track the software and projects that they use in development with a software bill of materials (SBOM). <\/p>\n<p><strong>More SBOMs on the Way?<br \/><\/strong>In the next year or two, SBOMs will become much more prevalent, but that still will not solve the issue, says Mackey.<\/p>\n<p>&#8220;The bigger problem is that most people don&#8217;t know what to do with [the SBOM],&#8221; he says. &#8220;It is another document that sits alongside the license agreement that nobody reads, and they don&#8217;t know what to do about it, but they have heard that it has some magic voodoo associated with it, so they want it, but they haven&#8217;t built a process for using it.&#8221;<\/p>\n<p>As companies become better about analyzing the components used by their software, they will also find and fix a lot of licensing issues as well. Because all sorts of open source licenses exist, businesses need to take care regarding what software they include in their own development. Currently, more than half of audited codebases (53%) have license conflicts, and 20% contain open source with no license or a nonstandard license.<\/p>\n<p>According to the Synopsys report,&nbsp;&#8220;Codebases that contain open source components with no discernible license or a customized license have an additional layer of risk.&#8221;&nbsp;<\/p>\n<p>Read More <a href=\"https:\/\/www.darkreading.com\/application-security\/80-of-software-codebases-contain-at-least-one-vulnerability\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Open source code continues its steady takeover of codebases, and organizations have made slight gains in eliminating out-of-date and vulnerable components.Read More <a href=\"https:\/\/www.darkreading.com\/application-security\/80-of-software-codebases-contain-at-least-one-vulnerability\">HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-46164","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>80% of Software Codebases Contain at Least One Vulnerability 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"80% of Software Codebases Contain at Least One Vulnerability 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-12T17:29:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"80% of Software Codebases Contain at Least One Vulnerability\",\"datePublished\":\"2022-04-12T17:29:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/\"},\"wordCount\":803,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt60503fd54e83367f\\\/6255929db686513d9157af22\\\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/\",\"name\":\"80% of Software Codebases Contain at Least One Vulnerability 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt60503fd54e83367f\\\/6255929db686513d9157af22\\\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\",\"datePublished\":\"2022-04-12T17:29:31+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt60503fd54e83367f\\\/6255929db686513d9157af22\\\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt60503fd54e83367f\\\/6255929db686513d9157af22\\\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/80-of-software-codebases-contain-at-least-one-vulnerability\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"80% of Software Codebases Contain at Least One Vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"80% of Software Codebases Contain at Least One Vulnerability 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"80% of Software Codebases Contain at Least One Vulnerability 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-04-12T17:29:31+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"80% of Software Codebases Contain at Least One Vulnerability","datePublished":"2022-04-12T17:29:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/"},"wordCount":803,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/","url":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/","name":"80% of Software Codebases Contain at Least One Vulnerability 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale","datePublished":"2022-04-12T17:29:31+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt60503fd54e83367f\/6255929db686513d9157af22\/synopsys-codebase-vulnerabilities.png?width=690&amp;quality=80&amp;format=webply&amp;disable=upscale"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/80-of-software-codebases-contain-at-least-one-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"80% of Software Codebases Contain at Least One Vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/46164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=46164"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/46164\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=46164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=46164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=46164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}