86% of codebases had open source software vulnerabilities while 81% had high- or critical-risk vulnerabilities.