Known Vulnerabilities of Open Source Projects: Where Are the Fixes?
Antonino Sabetta, Serena Elisa Ponta, Rocío Cabrera Lozoya, Michele Bezzi, Tommaso Sacchetti, Matteo Greco, Gergő Balogh, Péter Hegedűs, Rudolf Ferenć, Ranindya Paramitha, Пащенко Иван Николаевич, Aurora Papotti, Ákos Milánkovich, Fabio Massacci · IEEE Security & Privacy · 2024
Every day, developers have the daunting task of tracing vulnerabilities back in a morass of commits. In this article, we report the experience of the industrial open source tool, Prospector, to support developers in this task.