Not verified
First-quarter 2026 assessment of 200 apps
183 of 200 vibe-coded apps, 91.5 percent, contained at least one vulnerability traceable to AI hallucination or missing security context.
2026-04
CVE growth in AI-generated code
CVE entries attributed to AI-generated code rose from 6 in January 2026 to more than 35 in March 2026.
Last updated 2026-03
Declared
What the sources report
The sources report 6 CVE entries attributed to AI-generated code in January 2026.
By March 2026 the count was more than 35.
Root cause class
Study
Covered by
What ShipReady can say
This is background, not a finding. It sets the context for the report rather than mapping to one check.
Sources
Related incidents
- Observed
5,600 vibe-coded apps scanned
More than 2,000 vulnerabilities and more than 400 exposed secrets found across vibe-coded apps.
2026-02 - Not verified
Tenzai study of AI-built apps
69 vulnerabilities across 15 apps built by five AI coding tools.
2026-02
Check your app
Free. No signup. Evidence behind every result.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated October 29, 2026