README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

OpenSSF Best Practices Badge Program

How to export vulnerability reports to HTML/PDF and Jira

Bug][reStructuredText] Badges displayed on GitHub as block

Make your Github readme looks more Crazy with badges

Badges - TL;DR for your repository's README - DEV Community

Badge appears cached and not updating in readme.md · Issue #10

Sharing the love with Netlify Deployment Badges

Top 5 Awesome Things to do in your README! - DEV Community

Badges - TL;DR for your repository's README - DEV Community

Snyk badge can't be loaded · Issue #347 · snyk/cli · GitHub

Intermittent 502 responses from camo.githubusercontent.com · Issue