The State of Open Source Security 2020

This Snyk report summarizes the 2020 state of open source security: open source adoption is growing rapidly while new vulnerability reports declined overall, yet most issues are in indirect dependencies. The report calls out culture and process shifts toward shared responsibility (DevSecOps), persistent prevalence of XSS but disproportionate impact from less common issues (e.g., prototype pollution), significant known vulnerabilities in official container images, and misalignment between community remediation expectations and observed fix timelines.