QLPro is a novel vulnerability detection framework that systematically integrates large-scale language models (LLMs) with static analysis tools to enable comprehensive vulnerability detection across open source projects. When evaluated using a new dataset, JavaTest, consisting of 10 open source projects on GitHub (containing 62 confirmed vulnerabilities), the state-of-the-art static analysis tool CodeQL detected only 24 vulnerabilities, while QLPro detected 41 vulnerabilities. In addition, QLPro discovered 6 previously unknown vulnerabilities, 2 of which were identified as 0-day vulnerabilities.