The State of Open Source Vulnerabilities Management