README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

InsidersByte - README Badges

Badges

GitHub – How to display the status badge for a GitHub Action

Legitimize Your Project With Some Badge Swag

Sonarqube quality badges on gitlab - Stack Overflow

Public logs and status badges · Codefresh

Badges GitLab

Top 5 Awesome Things to do in your README! - DEV Community

Service Level Badges