VeriPort: Automated and Verified Patch Backporting at Scale

Jonah Ghebremichael, Wenxin Jiang, Mikola Lysenko +3

One of the key challenges for securing the software supply chain is addressing known vulnerabilities in third-party open-source dependencies. Security patches are frequently only a…