EXPLORING THE GITHUB ADVISORY DATABASE FOR FUN AND (NO) PROFIT

Summary from the TLDR InfoSec newsletter

This post looks at statistical trends of vulnerabilities in the GitHub Advisory Database. The most common CWE associated with vulnerabilities was cross-site scripting. Maven was the ecosystem associated with the greatest number of vulnerabilities.