145
AI coding tools are pretty good at finding bugs and make it easier and faster to fix them.
Importantly, security vulnerabilities in new releases seem to stay roughly the same and the change to which bugs count as CVEs was around version 6.8 already.
These were not a problem, because no one found them, but they were still there. Now they are being found, if not by the folks patching them, then by those looking to exploit them. There is no way to navigate this than to patch whatever is found.
Many governments and secret groups sit on Zero day exploits for years until they need to use them.
Average people are finding them easier now using AI, which is a good thing. Instead of 3 letter organizations sitting on them.