Open Source Software Security Vulnerability Prioritization Scheme

摘要

Concepts and technologies disclosed herein are directed to an open source security vulnerability prioritization scheme. According to one aspect disclosed herein, a software composition analysis system can obtain, from a vulnerability database, security vulnerability data about a set of known security vulnerabilities. The software composition analysis system can identify an application for analysis. The application can call a common library shared among a plurality of applications. The software composition analysis system can identify, based upon the set of known security vulnerabilities, a security vulnerability in the common library. The software composition analysis system can remediate the security vulnerability in the common library.