Open Source Vulnerabilities Plateau in 2025: New Threats Surge Despite Fewer Alerts
GitHub reviewed just 4,101 advisories in 2025, the lowest since 2021. Don't pop the champagne—new vulnerabilities jumped 19%, and npm malware spiked 69%.
⚡ Key Takeaways
- Reviewed advisories hit 4,101 in 2025 (lowest since 2021), but new vulnerabilities rose 19%.
- CWE-79 (XSS) still #1; resource exhaustion and deserialization climbed fast.
- npm malware advisories up 69%; Go ecosystem overrepresented by 6%.
Worth sharing?
Get the best Developer Tools stories of the week in your inbox — no noise, no spam.
Originally reported by GitHub Blog
Related Stories
AI Dev Tools
rs-trafilatura + Firecrawl: The Web Scraping Duo That Thinks Like a Journalist
AI Dev Tools
Ditch the API: Test AI Agent Frontends with Real Streams
AI Dev Tools
Rust-Powered rs-trafilatura Supercharges Crawl4AI: 0.910 F1 on Benchmarks
AI Dev Tools