"Majority of Critical Open Source Projects Contain Memory Unsafe Code"

A new analysis by the US Cybersecurity and Infrastructure Security Agency (CISA) and government agency partners from Australia and Canada found that 52 percent of critical open source projects use memory-unsafe code. The "Exploring Memory Safety in Critical Open Source Projects" joint report delves into memory safety risk in open source software. It looked at 172 projects from the Open Source Security Foundation (OpenSSF) Securing Critical Projects Working Group's List of Critical Projects. This article continues to discuss security risks from memory-unsafe languages and the transition to memory-safe languages.

Infosecurity Magazine reports "Majority of Critical Open Source Projects Contain Memory Unsafe Code"

Submitted by grigby1