{"as_of":"2026-08-13T02:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d3fc29403feac6bd06c2c352e68b952d6fb0a55338602390aeaa664eaad07c70","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T06:39:58.531858Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.12308/citation-record","integrity":"/paper/2607.12308/integrity","json":"/paper/2607.12308/citation-record.json","paper":"/paper/2607.12308"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:53.622570Z","title":"Riding out DOMsday: Towards detecting and preventing DOM cross-site scripting,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:53.622570Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:d30ac390c5ddd4206b10bcb26749bbfb191adbd559e39e807493ac8dadddbf0d","observation_id":"ae0e13f0-e2de-4258-911d-7366723c6d6c","resolution":{"observed_at":"2026-08-02T06:39:53.622570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:53.781743Z","title":"Understanding and auto- matically preventing injection attacks on node. js,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:53.781743Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:3821be32b65363ebb236d46179b750a2dace2b93d14f4a3571916c081f63bc23","observation_id":"45381d5f-f2d4-49c3-9dee-0cdd7a09ac23","resolution":{"observed_at":"2026-08-02T06:39:53.781743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:53.927031Z","title":"NodeMedic- FINE: Automatic detection and exploit synthesis for Node.js vulnera- bilities,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:53.927031Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:c9d5eb7d03468372756031cc7db5cb0532b88284e5887ac1bad6986b35ba0a2d","observation_id":"6b35807b-41a5-4bae-85ca-e7f424d1f211","resolution":{"observed_at":"2026-08-02T06:39:53.927031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:54.107670Z","title":"Automated exploit generation for Node.js packages,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.107670Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:61c005c08ad6f789dfadc2dc29c446b4c4901738c5e2b84c49951d9eb1c2a4f8","observation_id":"26e729e1-6b8e-4f71-ad47-0e247cbc6b37","resolution":{"observed_at":"2026-08-02T06:39:54.107670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:54.269117Z","title":"Probe the proto: Measuring client-side prototype pollution vulnerabilities of one million real-world websites,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.269117Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:009c41ff4de577129da4740f7b3e502d7437fe3044f8c653b777070ddaf53133","observation_id":"1f8081b3-6784-410a-87a6-ed201ecbaddb","resolution":{"observed_at":"2026-08-02T06:39:54.269117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:54.418009Z","title":"Follow my flow: Unveiling client-side prototype pollution gadgets from one million real-world websites,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.418009Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:7d8fe1fb8483013c0019fc49c26a060fbc6e6d94c0e680604a46f74dc137a3fa","observation_id":"844dc057-ae8a-40b3-894e-198b04e07718","resolution":{"observed_at":"2026-08-02T06:39:54.418009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.21302","last_updated":"2025-12-09T02:27:24Z","snapshot_observed_at":"2026-08-09T01:26:02.661729Z","submitted_at":"2025-08-29T01:47:07Z","title":"Locus: Agentic Predicate Synthesis for Directed Fuzzing","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.21302","snapshot_observed_at":"2026-08-02T06:39:54.533292Z","title":"Locus: Agentic pred- icate synthesis for directed fuzzing,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.533292Z"},"links":{"cited_paper":"/paper/2508.21302","citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:9cd967e912db12836572155ada1533a657da788d74326fbbd6498eddcdaed3a1","observation_id":"f79183b0-ed49-41bb-b5b0-739945487bef","resolution":{"observed_at":"2026-08-02T06:39:54.533292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.18474","last_updated":"2025-02-05T14:27:17Z","snapshot_observed_at":"2026-08-09T05:27:19.931068Z","submitted_at":"2025-02-05T14:27:17Z","title":"A Contemporary Survey of Large Language Model Assisted Program Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.18474","snapshot_observed_at":"2026-08-02T06:39:54.630323Z","title":"A contemporary survey of large language model assisted program analysis,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.630323Z"},"links":{"cited_paper":"/paper/2502.18474","citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:10dc4379a744e6a8f19cfd66cfa3b933dd1a4fa42c836d6884d71d6762312f84","observation_id":"aac4879f-db81-4372-8ca2-23371fe3ec05","resolution":{"observed_at":"2026-08-02T06:39:54.630323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.04962","last_updated":"2026-06-28T09:23:55Z","snapshot_observed_at":"2026-08-07T10:27:10.848359Z","submitted_at":"2025-06-05T12:37:33Z","title":"PoCGen: Generating Proof-of-Concept Exploits for Vulnerabilities in Npm Packages","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.04962","snapshot_observed_at":"2026-08-02T06:39:54.725821Z","title":"Pocgen: Generating proof-of- concept exploits for vulnerabilities in npm packages,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.725821Z"},"links":{"cited_paper":"/paper/2506.04962","citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:a9d05586c92f760085959618dc492fbf34e0ead7b7e9376457905bd8a3ab6385","observation_id":"a5af09ee-6cfc-4c48-90e1-096ce3355bce","resolution":{"observed_at":"2026-08-02T06:39:54.725821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:54.815554Z","title":"Jalangi: A selec- tive record-replay and dynamic analysis framework for JavaScript,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.815554Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:6d212b0020e5ef3c60af6183be411b48f0daace7d14c0ce22af601b451f370f0","observation_id":"db110620-b0de-4270-81a8-4bf1b7d2f547","resolution":{"observed_at":"2026-08-02T06:39:54.815554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:54.916339Z","title":"Platform-independent dynamic taint analysis for javascript,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.916339Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:971503e580849c219164c8fdfd5d2672d1287ed11117a5778ef35220f083219e","observation_id":"ed106cdb-e5fc-4d89-bb06-cfde0858566e","resolution":{"observed_at":"2026-08-02T06:39:54.916339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:54.993348Z","title":"NodeMedic: End-to-end analysis of Node.js vulnerabilities with provenance graphs,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:54.993348Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:9c5b44db5083b73721cd6edba137890b06134406f1933375372358cbee0c0b5b","observation_id":"d07b888b-fc7a-4231-b695-5008d549f38a","resolution":{"observed_at":"2026-08-02T06:39:54.993348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.057851Z","title":"Hand sanitizers in the wild: A large-scale study of custom javascript sanitizer functions,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.057851Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:52a9cd6154b603bb75e1240a228cce243417d0fc316f0cc5e19463fffde7b061","observation_id":"f3f3deab-51eb-4e41-9866-cbe1b1428ec1","resolution":{"observed_at":"2026-08-02T06:39:55.057851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.104567Z","title":"PanoptiChrome: A modern in-browser taint analysis framework,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.104567Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:60f177b479eecf39bee175effccd837ce36f3fb221a25f8355f3585b62c5eca0","observation_id":"a3b428e2-d34f-46a7-ab2e-bd382d620d68","resolution":{"observed_at":"2026-08-02T06:39:55.104567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.149728Z","title":"Secbench.js: An executable security benchmark suite for server-side javascript,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.149728Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:6f0dbfd77c54105bc23fac066cf32060d48a7132348810de872869f646ea5544","observation_id":"85d98763-a45a-4703-a8e2-24abc4ae5690","resolution":{"observed_at":"2026-08-02T06:39:55.149728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.225023Z","title":"Cve-2025-61686,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.225023Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:efd8aee6a51d9846236e6b8f5e30896ad7764b1cb484e19e83007da5d804f9bc","observation_id":"4b201ec7-da31-4746-ac28-f7ba467f89ed","resolution":{"observed_at":"2026-08-02T06:39:55.225023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.292610Z","title":"React router,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.292610Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:4f816cd3770f84fa0a7ff1e10cacad9848b61984ff4703eebd976851c8f6c2fa","observation_id":"99f50c72-8c6f-45f9-b1be-7b80b931ccce","resolution":{"observed_at":"2026-08-02T06:39:55.292610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.390989Z","title":"n8n - secure workflow automation for technical teams,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.390989Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:8fd1145d43ac7ddd8584341fb6bbde7f02ec3e1bbf6af975e38cb72e6108b51d","observation_id":"a387b448-f127-4247-b341-7d0cc4abbb31","resolution":{"observed_at":"2026-08-02T06:39:55.390989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.497708Z","title":"CodeQL: Semantic code analysis engine,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.497708Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:64bed392465350c13b536d8752a4216122bd592e377e9d49fbe29ef9de1f2856","observation_id":"44805f5d-ceaf-4297-bc7f-16a2fd502731","resolution":{"observed_at":"2026-08-02T06:39:55.497708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.582094Z","title":"Cve-2025-55449,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.582094Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:7a80f6a1f9b5ab838b41c3c5ae32e1cee0ec39c6fbf0cff9dc8901eb99f4badf","observation_id":"4ed8e89c-2df3-40ae-8a11-ef26cfb81dad","resolution":{"observed_at":"2026-08-02T06:39:55.582094Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.642091Z","title":"Dynamic security analysis of JavaScript: Are we there yet?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.642091Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:e379af0176b9d3b8cb32a0cd4c35a6d4dc1e03c397b7fd20ca097a941bdd33aa","observation_id":"3fad008a-6c60-46a3-abcd-682e0731ddac","resolution":{"observed_at":"2026-08-02T06:39:55.642091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.668545Z","title":"An empirical study of information flows in real-world javascript,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.668545Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:43d2445a8ae07409cc137d78ea9078f36d4d2ed1b10f53476ec17a8a90e211cb","observation_id":"5f92361b-be20-48c5-a677-7569194a580e","resolution":{"observed_at":"2026-08-02T06:39:55.668545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.687519Z","title":"All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask),","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.687519Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:2cb454597f8c6e131c97e05d17cb9c0c6680e4f0d1375a83e6c868e299234f98","observation_id":"5a5af08a-a5fa-4a59-bff2-daf6b542774a","resolution":{"observed_at":"2026-08-02T06:39:55.687519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.725583Z","title":"Dynamic taint analysis for automatic detection, analysis, and signaturegeneration of exploits on commodity software","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.725583Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:af3e34127d503a8294b44be49955cf309da02c3fd0e70a1a7295cb252824e527","observation_id":"07d5281a-cfe1-4ce2-a9b0-b7e382ca0d13","resolution":{"observed_at":"2026-08-02T06:39:55.725583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.844334Z","title":"libdft: Practical dynamic data flow tracking for commodity systems,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.844334Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:1abb6a903fd37d6f41dc8322d17e6740d396390e00ee3b77a9215c0a858e0b36","observation_id":"19a28760-8cf6-4c9b-b1ed-09560fb2a8db","resolution":{"observed_at":"2026-08-02T06:39:55.844334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:55.985578Z","title":"Dytan: a generic dynamic taint analysis framework,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:55.985578Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:778de2af3deedf9e637e7f1ef73a55d932d0b1d53f91ac1d3530582038bd9240","observation_id":"381c0eef-451c-42f2-8dac-cb8292d9b57b","resolution":{"observed_at":"2026-08-02T06:39:55.985578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.113257Z","title":"{SelectiveTaint}: Efficient data flow tracking with static binary rewriting,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.113257Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:e807741185c45e390d3da3bc59c0c60ea8b6847f360df07c2712e46df70956c4","observation_id":"222196f9-4af8-4f0e-8e31-9497cf4d9308","resolution":{"observed_at":"2026-08-02T06:39:56.113257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.238108Z","title":"Taintdroid: an information- flow tracking system for realtime privacy monitoring on smartphones,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.238108Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:13f25baa3931c6d2894085dc5ec8ec4dc37b345e6732d56624ebf44503bd5651","observation_id":"f5f02ab8-7105-470a-a1c4-4aea3bc81d3e","resolution":{"observed_at":"2026-08-02T06:39:56.238108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.427331Z","title":"Dta++: dynamic taint analysis with targeted control-flow propagation","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.427331Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:ca0eb7ad6096c4ccb757e8f6e2fcb37992d7c2e0a997aeb56b348b9daf70e86d","observation_id":"50a5578e-2b96-4548-a01e-ba68c90d63d3","resolution":{"observed_at":"2026-08-02T06:39:56.427331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.565141Z","title":"Jaw: Studying client-side csrf with hybrid property graphs and declarative traversals,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.565141Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:2e0716fd9b2e5d71867410db6b63b7832b6012bb474f0224a3b6c43c01bad54a","observation_id":"8ffa3049-2e72-4b83-8477-6fe3e2ca4f71","resolution":{"observed_at":"2026-08-02T06:39:56.565141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.740336Z","title":"Riding out domsday: Towards detecting and preventing dom cross-site scripting,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.740336Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:53a19508c4c087f3f56da5e3042591cc277cb9f4f915224f25b0ae51376d82d2","observation_id":"0ddd141d-b224-4215-95ed-978a90da6558","resolution":{"observed_at":"2026-08-02T06:39:56.740336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.879458Z","title":"Precise interprocedural dataflow analysis via graph reachability,","venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.879458Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:4e2be8f108f47a103931efc1ee2f412db7a65c24d108d3a1e7653073f1f722fa","observation_id":"1c4e6375-af3e-4eca-9ce0-a4bea76dd103","resolution":{"observed_at":"2026-08-02T06:39:56.879458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:56.973446Z","title":"Two approaches to interprocedural data flow analysis,","venue":null,"work_id":null,"year":1981},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:56.973446Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:e2e56f5e0a54b90bb0f3a824baffffe870f70c23d0760a390f261a252b7cedaa","observation_id":"f9e5d472-1fe8-4ab2-8de1-b52b4beab8da","resolution":{"observed_at":"2026-08-02T06:39:56.973446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.139579Z","title":"Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.139579Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:08f896f3519321234e0886dc0be64edfd45e466861ad7a05e7769bf15c6145f2","observation_id":"54bcd502-974c-4dd2-8589-db29c0c3dea2","resolution":{"observed_at":"2026-08-02T06:39:57.139579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.304740Z","title":"Information flow analysis of android applications in droidsafe","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.304740Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:ecdb2f4dc2acdd27d3a4f2277c8118ed97968c5bff668a9cfc032edb855b983d","observation_id":"63c8cf7f-2801-44e9-92bf-7677579780ca","resolution":{"observed_at":"2026-08-02T06:39:57.304740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.427934Z","title":"Jn-saf: Precise and efficient ndk/jni-aware inter-language static analysis framework for secu- rity vetting of android applications with native code,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.427934Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:f21cd2a30a21cf2519b0609d5dfdf00aa2f0cb06c28d6629bcf247f997a41c0f","observation_id":"1ddfe472-d0c0-4098-9a74-41b61bf6563a","resolution":{"observed_at":"2026-08-02T06:39:57.427934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.627366Z","title":"Compositional taint analysis for enforcing security policies at scale,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.627366Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:14fe303ef8b2550e14edc259ac5e78e4f985782cbe7fb5eab704c14193433b7c","observation_id":"47f723e5-96ed-4ef7-80cc-ee6e8802d64a","resolution":{"observed_at":"2026-08-02T06:39:57.627366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.805766Z","title":"Ql: Object- oriented queries on relational data,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.805766Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:da2726d0c411b58cfddaf2b26af4f9a25068627bb213805391bd39d1e1ab4018","observation_id":"e748a850-7d2b-4212-837d-74037d28d976","resolution":{"observed_at":"2026-08-02T06:39:57.805766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.888915Z","title":"Finding application errors and security flaws using pql: a program query language,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.888915Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:c56cab00807ae918c509b01d04487ee6f06e77ad69d3866a67c6e091ea07b719","observation_id":"d1a32176-2558-4694-8082-211582de99c7","resolution":{"observed_at":"2026-08-02T06:39:57.888915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:57.983453Z","title":"Fluently specifying taint-flow queries with fluent tql,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:57.983453Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:322869dec03356e5e0a4052e06203803f18c249506f28cc321e2df8bad057e57","observation_id":"dc924fe5-f54c-4107-a54d-52fb736310e6","resolution":{"observed_at":"2026-08-02T06:39:57.983453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:58.074387Z","title":"Secucheck: Engineer- ing configurable taint analysis for software developers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.074387Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:d64a55f7103d43a009dc66d379b9cb54feb8da2bd148dcce0729182fbc022d02","observation_id":"35f1b802-702a-4c15-93b0-d0ec0310c090","resolution":{"observed_at":"2026-08-02T06:39:58.074387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.17238","last_updated":"2025-04-06T23:46:59Z","snapshot_observed_at":"2026-08-12T23:57:02.661718Z","submitted_at":"2024-05-27T14:53:35Z","title":"IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.17238","snapshot_observed_at":"2026-08-02T06:39:58.169808Z","title":"IRIS: LLM-assisted static analysis for detecting security vulnerabilities,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.169808Z"},"links":{"cited_paper":"/paper/2405.17238","citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:380ea03a9f64de02b6bc5031ff249d6cab701d2831b5bfe9725eaa449dc9f323","observation_id":"4766774e-3c70-4e53-ab6d-4db5845622bb","resolution":{"observed_at":"2026-08-02T06:39:58.169808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:58.222772Z","title":"QLCoder: A query syn- thesizer for static analysis of security vulnerabilities,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.222772Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:556d388a2bf6fb38341d0f4e7981ebad13101f46046857511fb79cfa9a753d6a","observation_id":"7dc16416-6b02-4071-a95c-25efc3c8775b","resolution":{"observed_at":"2026-08-02T06:39:58.222772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:58.287892Z","title":"Multi-language dynamic taint analysis in a polyglot virtual machine,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.287892Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:f698fae22b47b7ed13e628cd262a851aebeced83b10ca912b1406bdd76810f2e","observation_id":"cd8605e2-1c7e-492a-b540-bf641a317de0","resolution":{"observed_at":"2026-08-02T06:39:58.287892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:58.350539Z","title":"Augur: Dy- namic taint analysis for asynchronous javascript,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.350539Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:421f458e322b825d16ceee40875aaeffc42c5e929742f3aadbc87e8441bedda3","observation_id":"acaef453-c15c-4f1d-9edc-1ff0233cafa9","resolution":{"observed_at":"2026-08-02T06:39:58.350539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:58.435021Z","title":"Creating concise and efficient dynamic analyses with alda,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.435021Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:b9c118e84f1d20ed59484ba880118f6f20a15763d47c6bb1881a13a859a78bbf","observation_id":"5549ae19-89a3-41d1-87d5-55f9f874fb14","resolution":{"observed_at":"2026-08-02T06:39:58.435021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:39:58.531858Z","title":"Debugging webassembly? put some whamm on it!","venue":null,"work_id":null,"year":2058},"citing_paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-02T06:39:58.531858Z"},"links":{"citing_paper":"/paper/2607.12308"},"observation_digest":"sha256:712a2318238df51b1c8f21078cc12eb8f0560c9cae4f4c370fa9bafbc6758ada","observation_id":"d58c18ed-fb1b-41c3-a118-4268c17280f1","resolution":{"observed_at":"2026-08-02T06:39:58.531858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.12308","last_updated":"2026-07-15T01:34:32Z","latest_version":2,"primary_category":"cs.PL","snapshot_observed_at":"2026-08-09T09:58:49.390687Z","submitted_at":"2026-07-14T03:31:14Z","title":"Mystra: Declarative Dynamic Taint Analysis via Shadow Virtual Machine"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2607.12308."}