Terra Security: patches are becoming 'maps' for attackers

Research from Terra Security found the share of patches later reported broken rose about eightfold in 2026. GitHub data shows open-source fixes needing a follow-up patch within 90 days jumped from below 0.5% to 2.3%. Patches for known-exploited bugs are four times as likely to be reported broken.

• Broken fixes on GitHub rose about eightfold in 2026
• Fixes needing a re-patch within 90 days grew from <0.5% to 2.3%
• Patches for known-exploited bugs break four times as often
• SSRF and prototype pollution fixes are most often incomplete