1. A method of correlating vulnerabilities across an evolving codebase, comprising: generating a representation of computer code, the representation different from the computer code; identifying a potential vulnerability during traversal of the representation of the computer code; collecting metadata of the potential vulnerability; generating a unique vulnerability signature of the potential vulnerability by hashing the metadata of the potential vulnerability; correlating the unique vulnerability signature of the potential vulnerability and previously stored vulnerability signatures of potential vulnerabilities to reduce duplicate potential vulnerabilities during the traversal; and determining characteristics of the potential vulnerability based on the correlation.