Between Risk, Recognition, and Necessity: How Open-Source Project Maintainers Perceive and Navigate CVEs Through Reporting and Resolving Vulnerabilities

Published in ACM Conference on Computer and Communications Security (CCS) 2026, 2026

To appear at the ACM Conference on Computer and Communications Security (CCS) 2026.

Citation details and a link to the paper will be added once the camera-ready version is available.