Down porting a fix commit of a recent version of a component to an older version of the component

A server comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable storage media to store instructions executable by the one or more processors to perform operations comprising:
• executing test code against an older version of a component in a third-party library to confirm that a vulnerability is exploitable in the older version of the component;
• identifying a fix commit in a newer version of the component that addresses the vulnerability;
• determining a plurality of code changes associated with the fix commit;
• determining a subset of the plurality of code changes that addresses the vulnerability;
• creating a patch based on the subset of the plurality of code changes;
• applying the patch to the older version of the component to create a patched component;
• and
• executing the test code against the patched component to confirm that the vulnerability is not exploitable in the patched component.

One or more non-transitory computer-readable storage media storing instructions executable by one or more processors to perform operations comprising:

• executing test code against an older version of a component in a third-party library to confirm that a vulnerability is exploitable in the older version of the component;
• identifying a fix commit in a newer version of the component that addresses the vulnerability;
• determining a plurality of code changes associated with the fix commit;
• determining a subset of the plurality of code changes that addresses the vulnerability;
• creating a patch based on the subset of the plurality of code changes;
• applying the patch to the older version of the component to create a patched component;
• and
• executing the test code against the patched component to confirm that the vulnerability is not exploitable in the patched component.