Did You Forkget It? Detecting One-Day Vulnerabilities in Open-source ForksWith Global History Analysis
The study developed a global history analysis approach using a comprehensive graph of public code to find one-day vulnerabilities in forked repositories. By tracking vulnerable and fixing commits across the entire fork ecosystem, it enables maintainers and users to proactively detect known but unpatched security issues inherited from upstream code.