VERJava: Vulnerable Version Identification for Java OSS with a Two-Stage Analysis | IEEE Conference Publication | IEEE Xplore