AI is spiking CVEs 886% — is your dependency chain ready?

As AI accelerates software development and vulnerability discovery, security teams face a challenge: increased visibility into software risk with more findings to address. The software supply chain is stabilizing around familiar foundations while growing more complex, requiring organizations to assess risks beyond top-level dependencies.

This report analyzes 2,400 container image projects and 18,016 vulnerabilities, revealing key trends:

• High-severity CVEs now make up 63% of vulnerabilities, a 13% quarterly increase
• Python, Node, and NGINX dominate, appearing in 44% of environments
• 97% of vulnerabilities occur outside the top 20 projects

Read the full report for details.