“Learning about new advisories, monitoring the corresponding feeds, and then assessing the relevancy in your application.”

Transcript evidence from Henrik Plate -- OWASP Top 10 Open Source Risks.