Background: Software vulnerabilities are weaknesses in source code that might be exploited
to cause harm or loss. Previous work has proposed a number of automated machine …

The widespread dependency on open-source software makes it a fruitful target for malicious
actors, as demonstrated by recurring attacks. The complexity of today's open-source supply …

Third-party library reuse has become common practice in contemporary software
development, as it includes several benefits for developers. Library dependencies are …

Knowing the exploitability and severity of software vulnerabilities helps practitioners
prioritize vulnerability mitigation efforts. Researchers have proposed and evaluated many …

Several large scale studies on the Maven, NPM, and Android ecosystems point out that
many developers do not often update their vulnerable software libraries thus exposing the …

Third-party libraries play a key role in software development as they can relieve developers
of the heavy burden of re-implementing common functionalities. However, third-party …

Open source software (OSS) libraries are widely used in the industry to speed up the
development of software products. However, these libraries are subject to an ever …

Advancing our understanding of software vulnerabilities, automating their identification, the
analysis of their impact, and ultimately their mitigation is necessary to enable the …

Background: Vulnerable dependencies are a known problem in today's open-source
software ecosystems because OSS libraries are highly interconnected and developers do …

Background: Modern software uses many third-party libraries and frameworks as
dependencies. Known vulnerabilities in these dependencies are a potential security risk …