CISA's Flags Memory-Unsafe Code in Major Open Source Projects

A CISA-led analysis finds extensive use of memory-unsafe languages in major open-source projects—52% of 172 projects contained memory-unsafe code and 55% of combined lines were memory-unsafe—creating broad exposure to buffer-overflow and use-after-free vulnerabilities; the report highlights dependency risks, disabled safety features, and the high cost and complexity of migrating large codebases to memory-safe languages (Rust, Go, Java, etc.), and recommends continued adoption of memory-safe languages, secure coding practices, and rigorous security testing.