{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:53:10Z","timestamp":1791460390096,"version":"4.3.4"},"reference-count":12,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Sec4AI4Sec","award":["101120393"],"award-info":[{"award-number":["101120393"]}]},{"name":"AssureMoss","award":["952647"],"award-info":[{"award-number":["952647"]}]},{"name":"Theseus","award":["NWA.121518006"],"award-info":[{"award-number":["NWA.121518006"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Secur. Privacy"],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/msec.2023.3343836","type":"journal-article","created":{"date-parts":[[2024,1,5]],"date-time":"2024-01-05T20:03:12Z","timestamp":1704484992000},"page":"49-59","source":"Crossref","is-referenced-by-count":23,"title":["Known Vulnerabilities of Open Source Projects: Where Are the Fixes?"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3506-8374","authenticated-orcid":false,"given":"Antonino","family":"Sabetta","sequence":"first","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6208-4743","authenticated-orcid":false,"given":"Serena Elisa","family":"Ponta","sequence":"additional","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8911-7392","authenticated-orcid":false,"given":"Rocio","family":"Cabrera Lozoya","sequence":"additional","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2084-0675","authenticated-orcid":false,"given":"Michele","family":"Bezzi","sequence":"additional","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tommaso","family":"Sacchetti","sequence":"additional","affiliation":[{"name":"Eurecom, Biot, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2643-9103","authenticated-orcid":false,"given":"Matteo","family":"Greco","sequence":"additional","affiliation":[{"name":"Be-Innova, Trento, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6781-5453","authenticated-orcid":false,"given":"Gerg\u0151","family":"Balogh","sequence":"additional","affiliation":[{"name":"Department of Software Engineering, University of Szeged, Szeged, Hungary"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4592-6504","authenticated-orcid":false,"given":"P\u00e9ter","family":"Heged\u0171s","sequence":"additional","affiliation":[{"name":"Department of Software Engineering, University of Szeged, Szeged, Hungary"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8897-7403","authenticated-orcid":false,"given":"Rudolf","family":"Ferenc","sequence":"additional","affiliation":[{"name":"Department of Software Engineering, University of Szeged, Szeged, Hungary"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6682-4243","authenticated-orcid":false,"given":"Ranindya","family":"Paramitha","sequence":"additional","affiliation":[{"name":"University of Trento, Trento, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8202-576X","authenticated-orcid":false,"given":"Ivan","family":"Pashchenko","sequence":"additional","affiliation":[{"name":"TomTom, Amsterdam, The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3207-7662","authenticated-orcid":false,"given":"Aurora","family":"Papotti","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, Amsterdam, The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"\u00c1kos","family":"Mil\u00e1nkovich","sequence":"additional","affiliation":[{"name":"SEARCH-LAB, Budapest, Dabas, Hungary"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1091-8486","authenticated-orcid":false,"given":"Fabio","family":"Massacci","sequence":"additional","affiliation":[{"name":"TomTom, Amsterdam, The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/dsn-s52858.2021.00011"},{"key":"ref2","first-page":"869","article-title":"Towards the detection of inconsistencies in public security vulnerability reports","volume-title":"Proc. 28th USENIX Conf. Secur. Symp. (SEC)","author":"Dong","year":"2019"},{"key":"ref3","article-title":"VFCFinder: Seamlessly pairing security advisories and patches","author":"Dunlap","year":"2023"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3197786"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813604"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/icsme.2018.00054"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09830-x"},{"key":"ref8","volume-title":"AssureMOSS Vulnerability Statements Dataset (Tracer) (1.0) [Data set]","author":"Sabetta","year":"2023"},{"key":"ref9","volume-title":"AssureMOSS Vulnerability Statements Dataset (Steady) (1.0) [Data set]","author":"Sabetta","year":"2023"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484593"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549125"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/dsn48987.2021.00030"}],"container-title":["IEEE Security & Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8013\/10488829\/10381645.pdf?arnumber=10381645","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,3]],"date-time":"2024-04-03T18:00:19Z","timestamp":1712167219000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10381645\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":12,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/msec.2023.3343836","relation":{},"ISSN":["1540-7993","1558-4046"],"issn-type":[{"value":"1540-7993","type":"print"},{"value":"1558-4046","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}