This episode reports on new reports on vulnerabilities and software supply chain security