Joshua Garcia

Investigating Vulnerability Disclosures in Open-Source Software Using Bug Bounty Reports and Security Advisories

2025 · arXiv (Cornell University)

In the world of open-source software (OSS), the number of known vulnerabilities has tremendously increased. The GitHub Advisory Database contains advisories for security risks in GitHub-hosted OSS projects. As of 09/25/2023, there are 197,609 unreviewed …