Most of the 100 vulnerabilities resolved this week, including critical flaws, were in third-party dependencies.