UK: How Open Is Open Source? Averted Cyber Attack Indicates Watershed Moment In Open Source Supply Chain Security And Poses Important Questions On Software Liability - Herbert Smith Freehills

Over the Easter weekend, it has been reported that a data compression library called XZ Utils contained a sophisticated backdoor (vulnerability CVE-2024-3094) which enabled remote code execution.