If a vulnerability keeps being resolved and reopened, even if the third-party application containing the vulnerability has been upgraded, it might be that a process is still using that vulnerable library, and that process isn't running all the time. When the process is not in use, the vulnerability is resolved. When it starts running again, the vulnerability is reopened. On the details page of the vulnerability, check for affected processes
