PatchPorter: LLM-Driven Security Patch Porting via Version Tracing and Context Selection for NPM
Third-Party Libraries are widely used in modern software development, yet their vulnerabilities pose serious security risks. This issue is particularly severe in the NPM ecosystem, where high-risk 1-day vulnerabilities can remain unpatched for extended periods. Although upgrading to the latest patched version is common...
Zeliang Yu, Ming Wen, Zichao Wei et al.
· Proceedings of the ACM on so... · 1 citation