C003 — H2:¶
Contents¶
Statement: The specific figures are inaccurate or misquoted from the OSSRA report. The actual percentages, averages, or growth rates differ materially from what is claimed.
Supporting Evidence Would Show¶
- The OSSRA report showing different numbers (e.g., 84% instead of 87%, or 400 instead of 581)
- Evidence that the figures come from different editions of the report and are being conflated
- Evidence that the 107% increase applies to a different metric than vulnerability count per codebase
Eliminating Evidence Would Show¶
- The OSSRA report containing exactly these figures in the context described
- Multiple independent summaries of the report all citing the same numbers