Image de couverture de livre

The Ripple Effect of Vulnerabilities in Maven Central: Prevalence, Propagation, and Mitigation Challenges

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Haq, Ehtisham Ul, Wang, Song, Allison, Robert S.
Format:	Preprint
Publié:	2025
Sujets:	Software Engineering
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Popularity and Innovation in Maven Central
par: Ede, Nkiru, et autres
Publié: (2025)

Software Bills of Materials in Maven Central
par: Gamage, Yogya, et autres
Publié: (2025)

Chasing the Clock: How Fast Are Vulnerabilities Fixed in the Maven Ecosystem?
par: Rabbi, Md Fazle, et autres
Publié: (2025)

Understanding Software Vulnerabilities in the Maven Ecosystem: Patterns, Timelines, and Risks
par: Rabbi, Md Fazle, et autres
Publié: (2025)

Towards Compatibly Mitigating Technical Lag in Maven Projects
par: Lu, Rui
Publié: (2025)

Decoding Dependency Risks: A Quantitative Study of Vulnerabilities in the Maven Ecosystem
par: Nachuma, Costain, et autres
Publié: (2025)

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks
par: Yang-Smith, Corey, et autres
Publié: (2025)

Faster Releases, Fewer Risks: A Study on Maven Artifact Vulnerabilities and Lifecycle Management
par: Shafin, Md Shafiullah, et autres
Publié: (2025)

Out of Sight, Still at Risk: The Lifecycle of Transitive Vulnerabilities in Maven
par: Przymus, Piotr, et autres
Publié: (2025)

On the Freshness of Pinned Dependencies in Maven
par: Vikram, Vasudev, et autres
Publié: (2025)

Dependency Dilemmas: A Comparative Study of Independent and Dependent Artifacts in Maven Central Ecosystem
par: Shanto, Mehedi Hasan, et autres
Publié: (2025)

Understanding Abandonment and Slowdown Dynamics in the Maven Ecosystem
par: Hasan, Kazi Amit, et autres
Publié: (2025)

Insights into Dependency Maintenance Trends in the Maven Ecosystem
par: Chowdhury, Barisha, et autres
Publié: (2025)

On the Variability of Source Code in Maven Package Rebuilds
par: Dietrich, Jens, et autres
Publié: (2026)

B-OCL: An Object Constraint Language Interpreter in Python
par: Haq, Fitash Ul, et autres
Publié: (2025)

Can Language Models Pass Software Testing Certification Exams? a case study
par: Haq, Fitash Ul, et autres
Publié: (2026)

Dependency Update Adoption Patterns in the Maven Software Ecosystem
par: Berretta, Baltasar, et autres
Publié: (2025)

Structural and Connectivity Patterns in the Maven Central Software Dependency Network
par: Ogenrwot, Daniel, et autres
Publié: (2025)

TransferFuzz: Fuzzing with Historical Trace for Verifying Propagated Vulnerability Code
par: Li, Siyuan, et autres
Publié: (2024)

Multi-Agent End-to-End Vulnerability Management for Mitigating Recurring Vulnerabilities
par: Zheng, Zelong, et autres
Publié: (2026)

Maven-Lockfile: High Integrity Rebuild of Past Java Releases
par: Schmid, Larissa, et autres
Publié: (2025)

RippleGUItester: Change-Aware Exploratory Testing
par: Su, Yanqi, et autres
Publié: (2026)

Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
par: Reyes, Frank, et autres
Publié: (2024)

Advanced Vulnerability Scanning for Open Source Software: Detection and Mitigation of Log4j Vulnerabilities
par: Wen, Victor, et autres
Publié: (2026)

Generating Mitigations for Downstream Projects to Neutralize Upstream Library Vulnerability
par: Chen, Zirui, et autres
Publié: (2025)

Propagation-Based Vulnerability Impact Assessment for Software Supply Chains
par: Ruan, Bonan, et autres
Publié: (2025)

Tracing Vulnerability Propagation Across Open Source Software Ecosystems
par: Ruohonen, Jukka, et autres
Publié: (2025)

Vulnerability Handling of AI-Generated Code -- Existing Solutions and Open Challenges
par: Kaniewski, Sabrina, et autres
Publié: (2024)

Hallucination by Code Generation LLMs: Taxonomy, Benchmarks, Mitigation, and Challenges
par: Lee, Yunseo, et autres
Publié: (2025)

Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem
par: Hu, Jinchang, et autres
Publié: (2023)

SecVulEval: Benchmarking LLMs for Real-World C/C++ Vulnerability Detection
par: Ahmed, Md Basim Uddin, et autres
Publié: (2025)

M2CVD: Enhancing Vulnerability Semantic through Multi-Model Collaboration for Code Vulnerability Detection
par: Wang, Ziliang, et autres
Publié: (2024)

Fundamental Challenges in Cybersecurity and a Philosophy of Vulnerability-Guided Hardening
par: Böhme, Marcel
Publié: (2024)

Code Change Intention, Development Artifact and History Vulnerability: Putting Them Together for Vulnerability Fix Detection by LLM
par: Yang, Xu, et autres
Publié: (2025)

ChatGPT Inaccuracy Mitigation during Technical Report Understanding: Are We There Yet?
par: Tamanna, Salma Begum, et autres
Publié: (2024)

Efficiently Detecting Reentrancy Vulnerabilities in Complex Smart Contracts
par: Wang, Zexu, et autres
Publié: (2024)

A Data-Mining Based Study of Security Vulnerability Types and Their Mitigation in Different Languages
par: Antal, Gábor, et autres
Publié: (2024)

Rethinking the Evaluation of Microservice RCA with a Fault Propagation-Aware Benchmark
par: Fang, Aoyang, et autres
Publié: (2025)

Challenging Machine Learning Algorithms in Predicting Vulnerable JavaScript Functions
par: Ferenc, Rudolf, et autres
Publié: (2024)

Multitask-based Evaluation of Open-Source LLM on Software Vulnerability
par: Yin, Xin, et autres
Publié: (2024)