GitHub published 4,101 reviewed advisories in 2025. This is the fewest number of reviewed advisories since 2021 . Does this mean open source is shipping more secure code? Let’s dig into the data to find out.

GitHub reviewed advisories

Fewer advisories reviewed doesn’t mean fewer vulnerabilities were reported. The drop is because GitHub reviewed far fewer older vulnerabilities . When you look only at newly reported vulnerabilities from our sources , GitHub actually reviewed 19% more advisories year over year.

<img referrerpolicy="no-referrer" data-recalc-dims="1" decoding="async" width="4290" height="2640" loading="lazy" src="https://github.blog/wp-content/uploads/2026/03/1-GHADB-Feeds-vs-Backfill.png?resize=4290%2C2640" alt="Stacked bar graph showing the number of advisories published from GitHub's feeds and those published from the backfill campaigns.

Reviewed Year From Feeds From Backfill 2020 1145 1539 2021 1419 1412 2022 2731 1848 2023 3065 1792 2024 3142 2093 2025 3734 367"…