Vulnerability Risk Modelling In Open Source Software Systems