What is OSERA, and why are six global banks pooling the cost of patching open source software?
One of OSERA's platinum members runs 40,000 internal source code repositories. When a vulnerability is disclosed in a widely used open source library, that bank, and most of its peers, are all patching the same thing at roughly the same time, independently. Research cited in the OSERA announcement says the duplication rate for private forks of the same open source projects is one in five financial institutions maintaining separate teams. There's even a name for it now - the fork tax.
OSERA - the Open Source Enterprise Resiliency Alliance - is the Fintech Open Source Foundation's (FINOS) attempt to turn that duplicated work into shared industry capability. It launched in June 2026 as an intent-to-form announcement, and from the Open Source Summit Europe keynote stage in Prague, Columbro declared it operational, with six premier members, a published remediation standard, and more than 50 patched Spring and Java projects in production.
...
Copyright of this story solely belongs to diginomica.com. To see the full text click HERE
