Open Source Vulnerability Assessment