3070
The problem is that commercial software in general uses a great deal of open source code – 35 % on average - and authors of the code do n’t necessarily have processes in place to track when vulnerabilities are found in that code and to then patch them , he says .
 ( discover vulnerability: are found,  vulnerabilities: vulnerability, commercial software: vulnerable system) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( discover vulnerability: are found,  vulnerabilities: vulnerability, commercial software: vulnerable system) 