RAG-VM: A Retrieval-Augmented Generation Framework for Vulnerability Management