When the platforms holding that much code accelerate their vulnerability disclosures quarter over quarter, that's not noise. Here's the number that should reorder every security roadmap for 2026: major DevOps platforms — GitHub, GitLab, Azure DevOps, and Atlassian's Jira and Bitbucket — patched 236 vulnerabilities in 2025, according to GitProtect's DevOps Threats Unwrapped report.
Fifteen years in, and the conversation I have most often with security leads still starts the same way: how's your perimeter, how's your endpoint coverage, how's your SOC staffed?
Almost nobody opens with "how's your pipeline." That's the gap I want to talk about, because 2025 was the year the gap turned into a crater.
Of those, 59% were rated high or critical: 14 critical, 126 high, 75 medium, 21 low.
The page is ready to read now. The fuller skim-friendly version will appear here automatically.
Fifteen years in, and the conversation I have most often with security leads still starts the same way: how's your perimeter, how's your endpoint coverage, how's your SOC staffed? Almost nobody opens with "how's your pipeline." That's the gap I want to talk about, because 2025 was the year the gap turned into a crater. Of those, 59% were rated high or critical: 14 critical, 126 high, 75 medium, 21 low.
Here's the number that should reorder every security roadmap for 2026: major DevOps platforms — GitHub, GitLab, Azure DevOps, and Atlassian's Jira and Bitbucket — patched 236 vulnerabilities in 2025, according to GitProtect's DevOps Threats Unwrapped report. That's a trend with a direction (DevOps.com, SecurityBrief).
Open the app view to save this story, compare related coverage, and continue from the same source.