MDA DSN LO Loginsoft Beyond Traditional SCA: Detecting Exploitable Vulnerabilities Using CodeQL Reachability Analysis Most Software Composition Analysis tools answer one question: is a vulnerable library version present in this project? That question is…