Did You Forkget It? Detecting One-Day Vulnerabilities in Open-source ForksWith Global History Analysis

Romain Lefeuvre, Charly Reux, Stefano Zacchiroli +2

Tracking vulnerabilities inherited from third-party open-source software is a well-known challenge, often addressed by tracing the threads of dependency information. However, vulne…