Tracing Vulnerabilities Across Product Releases