The vast majority of third-party code used in cloud infrastructure contains vulnerabilities and misconfigurations, which could leave organizations exposed to attack, according to Palo Alto Networks.
Source: https://www.infosecurity-magazine.com/news/third-party-cloud-containers/