Vulnerability-Triggering Test Case Generation from Third-Party Libraries

Understand

Open-source third-party libraries are widely used in software development.

• These libraries offer substantial advantages in terms of time and resource savings.
• However, a significant concern arises due to the publicly disclosed vulnerabilities within these libraries.
• Existing automated vulnerability detection tools often suffer from false positives and fail to accurately assess the propagation of inputs capable of triggering vulnerabilities from client projects to vulnerable code in libraries.