The Patchless Window — explorer

open-source CVEs published Jan–Aug 2026. Window = CVE publication − committer date of the chosen fix commit.
Fix:

Median window by publication month

This data vs the paper's Fig. 5. Ignores the month filter.

This data Paper (Fig. 5)

Fix-commit coverage by month

How each CVE's fix was found.

Structured Agent Not timed No fix found

Every timed CVE: window in days

Symmetric-log scale. Below 0 = fix committed after CVE publication. Tick = month median. Click a dot for details.

Structured fix Agent fix Median

CVEs

CVEMonthCNA FixWindow (d) Fix→exploit (d)Title

Details

Select a CVE.