"90% of Java services have critical or severe security vulnerabilities"... or about the quirks of security reporting – JVM Weekly vol. 80

The State of DevSecOps report reveals that a significant number of Java services have dangerous vulnerabilities, with 55% of Java services affected. These vulnerabilities often stem from indirect dependencies. The report also highlights the discussion around alternative metrics for assessing vulnerability impact.