Maven maintainers patch critical vulnerabilities about 48% faster than low-severity ones after public disclosure, and dependent packages take a median of 151 days to adopt available fixes.
Empirical analysis of security vulnerabilities in python packages,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.SE 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
background 1representative citing papers
citing papers explorer
-
Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks
Maven maintainers patch critical vulnerabilities about 48% faster than low-severity ones after public disclosure, and dependent packages take a median of 151 days to adopt available fixes.