people · May 21, 2026
Sonatype 2026 State of the Software Supply Chain Report Notes 37x Growth in Unscored CVEs
Share the canonical public link.
Sonatype's 2026 State of the Software Supply Chain report documents global CVE count doubling over five years. The report states the number of unscored CVEs has grown 37x during the same period. HeroDevs analysis references Sonatype data showing AI-generated vulnerability reports adding to the noise in security assessments. Sonatype's findings cover over 10 trillion open source downloads across major registries.
Below validation threshold — auto-passed without scoring