GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)

Jafar Akhoundali, Kristian Rietveld, Olga Gadyatskaya

Attackers can compromise multiple systems with a single vulnerability, while defenders need to fix all security weaknesses in their systems. This asymmetry puts defenders at a disa…