3070
The problem is that commercial software in general uses a great deal of open source code – 35 % on average - and authors of the code do n’t necessarily have processes in place to track when vulnerabilities are found in that code and to then patch them , he says .
 vulnerabilities: vulnerability; commercial software: vulnerable system
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: discover vulnerability 
  Option: vulnerable system owner, vulnerability, capabilities, time, vulnerable system version, discoverer, common vulnerabilities and exposures, supported platform, vulnerable system 
Text: {0} 
Answer:
 vulnerabilities: vulnerability; commercial software: vulnerable system