code-projects vulnerabilities

Records are attributed to code-projects from the vendor named in the source records. About the data.

CVE records per year

CVE records published per year for code-projects
CVE records published per year for code-projectsBar chart of CVE records attributed to code-projects per publication year, 2017 to 2026. 2026 is not finished.02004006008002022: 2 CVE records2023: 53 CVE records2024: 256 CVE records2025: 761 CVE records2026: 356 CVE records (period not finished)3567612017201820192020202120222023202420252026
Show data as a table
YearCVE records
20170
20180
20190
20200
20210
20222
202353
2024256
2025761
2026356

2026 is partial (through 28 Oct 2026), shown in a lighter bar.

Severity by publication year. "Critical or high" is the share of scored records; "Not scored" is the share of all records.
YearRecordsCriticalHighCritical or highNot scored
2026356010.3%0%
2025761000%0%
20242566189.4%0%
2023531511.3%0%
202220150%0%
2021000——
2020000——
2019000——
2018000——
2017000——

Source: CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026. About the data.

Highest exploit-prediction scores (EPSS)

EPSS estimates the probability that a vulnerability is exploited in the next 30 days. These are the 10 highest-scoring code-projects records today.

CVEEPSSPercentileSeverityIn KEV
CVE-2023-713717%97.1%MediumNo
CVE-2026-50412.2%82.2%MediumNo
CVE-2025-64032%80.7%MediumNo
CVE-2024-107581.4%72.8%MediumNo
CVE-2024-101401.4%72%MediumNo
CVE-2024-78081.2%68.9%MediumNo
CVE-2024-89441.1%66.2%MediumNo
CVE-2024-30001%62%HighNo
CVE-2023-71091%61.9%HighNo
CVE-2022-31301%61.6%HighNo

Source: FIRST Exploit Prediction Scoring System (EPSS), v2026.06.15, as of 28 Oct 2026; CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026; CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.

All vendors · KEV catalog overview