TY - RPRT TI - Uncovering Hidden Inclusions of Vulnerable Dependencies in Real-World Java Projects AU - Stefan Schott AU - Serena Elisa Ponta AU - Wolfram Fischer AU - Jonas Klauke AU - Eric Bodden PY - 2026 UR - https://arxiv.org/abs/2601.23020 ID - 2601.23020 ER -