Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks. - Corey Yang-Smith; Ahmad Abdellatif (MSR, 2025)