KEVGraph: Exploitation-Aware Dependency Vulnerability Remediation

arXiv:2609.24164 · cs.CR · Submitted 2026-09-21 · Read on arXiv

cs.CR

Submitted: 2026-09-21

Updated: 2026-09-21

Comments: 10 pages, 6 figures

Code: https://github.com/en/code-security

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Verification — 5× in this paper · explained in 2 episodes
CISA Known Exploited Vulnerability — 4× in this paper
Integer Linear Programming — 3× in this paper
Binding Operational Directive — 2× in this paper
Deferral — 2× in this paper · explained in 2 episodes
Exploit Prediction Scoring System — 2× in this paper
Open Source Vulnerability — 2× in this paper
Provenance — 2× in this paper · explained in 3 episodes
Sparsity — 2× in this paper · explained in 4 episodes
Core — 1× in this paper · explained in 2 episodes
Cybersecurity and Infrastructure Security Agency — 1× in this paper
National Telecommunications and Information Administration — 1× in this paper
Software Bill of Materials — 1× in this paper
Trace — 1× in this paper · explained in 2 episodes
Verifier — 1× in this paper · explained in 2 episodes

Related papers