Investigating Vulnerability Disclosures in Open-Source Software Using Bug Bounty Reports and Security Advisories

Jessy Ayala, Yu-Jye Tung, Joshua Garcia

In the world of open-source software (OSS), the number of known vulnerabilities has tremendously increased. The GitHub Advisory Database contains advisories for security risks in G…