---
id: 8242
title: "Open Source Frameworks – How secure are they?"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/vulnerability-management/open-source-frameworks-how-secure-are-they/"
published_at: "2014-06-30T00:00:00Z"
tags: ["open-source", "code-review", "sql-injection", "xss", "third-party-risk", "sdlc"]
phying_url: "https://phying.com/item/8242"
lang: en
---

# Open Source Frameworks – How secure are they?

## Summary

Open source doesn't mean secure: reviewing one company's untouched framework surfaced nearly 80% of 10,000+ findings, including SQL injection and persistent XSS—vet third-party code accordingly.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2014-06-30T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/vulnerability-management/open-source-frameworks-how-secure-are-they/
- **Phying News:** https://phying.com/item/8242