A Vulnerability Analysis Method for Open-Source Components Based on Relational Subgraph Fusion
The open-source component-based development model has been widely adopted in software engineering. However, the complex correlations between open-source component dependency chains and vulnerabilities are difficult to effectively characterize, making it challenging to accurately identify vulnerabilities and quantify th...