Pith. sign in

Paper Citation Record · LEDGER

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

As of 7 August 2026, this Paper Citation Record lists 80 of 80 outbound references and 1 inbound Pith citation observation for arXiv:2506.12995.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.12995 v1

Coverage vector

measured 80 of 80 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:41:18.741692Z

measured 81 of 81 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T00:31:17.975540Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T00:31:19.886341Z

Reference resolution

80 of 80 outbound references displayed

  • verified exact0
  • verified fuzzy75
  • unresolved4
  • parse uncertain1
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ae68133b-e5ea-45d2-bb5b-d712bacc2f99 · outbound

This paper cites As- apy: A python library for aerospace simulation analysis,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software As- apy: A python library for aerospace simulation analysis,

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.254582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:15.391419Z digest=sha256:7a69ef8610a8aad9b11c81cb5d4169d1d1f39ef4adb2f942c65c9d28b73f3c3e

Observation 43dcde1f-e298-42d1-9075-9dde4bb1adc0 · outbound

This paper cites A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.240263Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:15.478313Z digest=sha256:102356105ee5428df0af70af33c18a1c11e74bc0f2c048442bb7d4d2f9035d11

Observation d5e403b9-6522-4cb5-aed6-2b3b416ebbaa · outbound

This paper cites Formation control method based on artificial potential fields for aircraft flight simulation,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Formation control method based on artificial potential fields for aircraft flight simulation,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.225801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:15.613314Z digest=sha256:99c270be004e6f7d752f4318a3f4857e5daaafb435c704efac85f1d010aeef72

Observation 1027d3e8-c8d3-48e3-a4d4-c1e0fb7a86cb · outbound

This paper cites Open source soft- ware and global entrepreneurship,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source soft- ware and global entrepreneurship,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.210324Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:15.694678Z digest=sha256:87dd8ae20a9d73b34c2396f7a5754320632200f506185c013be86e4341ba8f72

Observation 976373d7-feb5-498d-b9e5-f5985fd785fd · outbound

This paper cites Fingpt: Open- source financial large language models,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Fingpt: Open- source financial large language models,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:15.817244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:15.817244Z digest=sha256:f421b2881e3351e4e667840d82af57f627f781a9d91e268aa81724b7b44a3e0f

Observation 274a5120-5d37-47f9-a495-30c0483ea848 · outbound

This paper cites Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.195515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:15.932060Z digest=sha256:7792c136894ab3b7826651a5eff12dc6f260162a18788915c85fbfac8dc16c56

Observation df7cbab4-0dd6-4263-aec2-62d87431b68d · outbound

This paper cites Open source development: A double-edged sword,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source development: A double-edged sword,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.180371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.036048Z digest=sha256:a48b59915489b1acb301c7d9dc5e33ac5e10d65943d206777a8780f7f5880b7d

Observation 9fdfc375-7e45-48b3-9118-b47296ff5782 · outbound

This paper cites Impact of using open source software on cyberse- curity,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Impact of using open source software on cyberse- curity,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.166617Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.157152Z digest=sha256:75e20f10ce59ba3990cfc9c65f9b260d0204e143020f79e0f6384ee18d1e8b70

Observation c6973a6f-42bd-40c2-9f23-dd12c4a5724f · outbound

This paper cites 27 malicious pypi packages with info- stealing capabilities discovered,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 27 malicious pypi packages with info- stealing capabilities discovered,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.149657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.274147Z digest=sha256:7898807f6f261d029b234373393e46cbff34136bab01dba4a474c5ebdc194501

Observation a9b0eb19-5827-4e9a-820e-b35cbc440795 · outbound

This paper cites The hidden economy of open source software,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The hidden economy of open source software,

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.134558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.367592Z digest=sha256:26f21c1423b8719540bbf077951a816fb1663ec10bd156481292d65b2b1887fd

Observation a49cbc08-fea9-4f07-80ac-80ac3ab4a3b7 · outbound

This paper cites Dozens of npm packages caught attempting to deploy reverse shell,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dozens of npm packages caught attempting to deploy reverse shell,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.119693Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.482235Z digest=sha256:f3d256a92ab374d08766eb1810243b5a606997b4b0dcd8727e86203e01ad0ecb

Observation 737c72ec-5921-480a-aaf2-fee0dc79e823 · outbound

This paper cites Hundreds of malicious python packages found stealing sensitive data,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Hundreds of malicious python packages found stealing sensitive data,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.103553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.599845Z digest=sha256:96285885b747a50d9505777a16a4807042b4d499c0077a4b4778c3db4273d91d

Observation 30f7f07b-caf3-499a-b451-24b3fb21d327 · outbound

This paper cites Securing open source software act.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Securing open source software act

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.088767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.738793Z digest=sha256:48ae949702b5b33b0b290e9712f43f2434b38ed7e022382d791af3818ea5aeb7

Observation afcfe3a7-cbb8-4f34-b711-a172ef9ec48c · outbound

This paper cites Summary of the 2023 request for information on open source software security.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Summary of the 2023 request for information on open source software security

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.074844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.899241Z digest=sha256:52de129d4c3173118bcaa22bad90a1358e8cab4ee23fde099894968c184284af

Observation dcfea0ad-182c-4208-ae41-dca6b326ee85 · outbound

This paper cites Cisa open source software security roadmap.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Cisa open source software security roadmap

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.058420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:16.959603Z digest=sha256:d56ce9e0c1f0c0877dcbd375315550760b53faf59517917c2d0a46d5a7e348ce

Observation 43e960de-537c-41b6-a1f3-fdd546ebc97e · outbound

This paper cites Top web development languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Top web development languages

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.041151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.094990Z digest=sha256:919343e66d8fc5646d577c32173fc075bd687bb0f5cb179254c6f0604539f1b9

Observation fe91b5eb-f2a1-42ec-9213-efe7d0c40ea4 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.025113Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.177631Z digest=sha256:d0508415417b4240a72c6d2bfd5f6f31095a62eeaa575ff996ce2344c6e9aad6

Observation 47833b2c-748c-4e62-ac14-25736f0f99b1 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.009304Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.229547Z digest=sha256:ab56982a6a99a492f13ace317cfabc5d68c59dd83d9d340effe6e1b7552c0e79

Observation 46861d48-4678-43f6-8729-2932bbfa6e84 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.994200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.282845Z digest=sha256:f0c8b31f0c323180d77e8e7fdddda06cdfad1e9ef643b36176fb890755bf3311

Observation ab98dd44-5c3a-4d9d-939d-441a5443116e · outbound

This paper cites Empirical analysis of security vulnerabilities in python packages,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Empirical analysis of security vulnerabilities in python packages,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.979876Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.322669Z digest=sha256:a55deab375fc353590c2d0a348abc6006c63534a064641badf99baaf7a3a0951

Observation 3c138664-fe12-4918-bf5b-2fcb1929325f · outbound

This paper cites Small world with high risks: A study of security threats in the npm ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Small world with high risks: A study of security threats in the npm ecosystem,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.964782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.365173Z digest=sha256:86acee1224f0e8d0f30c2d499f088213d7e685f0e82a6c07bad716e5181923d7

Observation 6240d4cf-84af-4617-94e7-d08fbd221131 · outbound

This paper cites Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:17.469971Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:17.469971Z digest=sha256:8d353e8832d896b9766697b3362ae659cfc75ba3b43853e1a352ddfce09916bb

Observation 88f464a8-a85b-490d-9ae6-4fd1d136787f · outbound

This paper cites Do software security practices yield fewer vul- nerabilities?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Do software security practices yield fewer vul- nerabilities?,

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.950057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.591706Z digest=sha256:9868a08faa4d3cd156106e28059f181120af46665bf3501aadb759981629b890

Observation 4aa3aa75-94ea-4586-a50d-a95ad31e1379 · outbound

This paper cites An empirical comparison of dependency issues in oss packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency issues in oss packaging ecosystems,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.933844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.650349Z digest=sha256:35fcdca1d458b463dba31f15ef7b44d7de298b738862233353c9f53b8c06be08

Observation effc3bd8-b6cc-43a0-835e-8f81cd3a3fb4 · outbound

This paper cites An empirical comparison of dependency network evolution in seven software packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency network evolution in seven software packaging ecosystems,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.919148Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.725197Z digest=sha256:5948c53ad62c8497a30b62350366ea29943d3bc04b2793b6d85a6adf723e31c5

Observation ac7a2834-9612-4f8c-8d04-bdc76155363d · outbound

This paper cites Structure and evolution of package dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Structure and evolution of package dependency networks,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.904636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.844856Z digest=sha256:b0c05888fabdd78f8b5ded9f6a01c4bb60e573fbfb58f685338f7c384b55dacd

Observation d78b4291-1340-4d26-b57c-fb578ea630e3 · outbound

This paper cites On the impact of se- curity vulnerabilities in the npm package dependency network,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of se- curity vulnerabilities in the npm package dependency network,

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.889080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.872690Z digest=sha256:d00500475f87b197eccfb2b2e013288c046e1dd6aeac9acf89ba60ebc7a632da

Observation f2c65bf3-3524-4af7-b76f-fa825ddb501c · outbound

This paper cites On the impact of security vulnerabilities in the npm and rubygems dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of security vulnerabilities in the npm and rubygems dependency networks,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.874507Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.877137Z digest=sha256:9a59d1632fbf7ff83e9f1463c7d7086e3e5cd60ee6eb86768be9b10448780c51

Observation 8980cd96-0fb6-4e47-b513-50ea5d6bbff8 · outbound

This paper cites Vulnerable open source dependen- cies: Counting those that matter,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Vulnerable open source dependen- cies: Counting those that matter,

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.859695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.893228Z digest=sha256:ed536b7e39cd9635c9945343893435b7ac3f4bdb09fd1ef4f36764d7fa7b674a

Observation 3527b220-e0da-4787-bec3-7926dd5f7d3f · outbound

This paper cites Common vulnerabilities and exposures (cve).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common vulnerabilities and exposures (cve)

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.843838Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:17.973348Z digest=sha256:64cc123f3ab8b528e0e981487e69f56cdc8da997ba7bce6a574b4f5a2b9344ce

Observation 2e20f57f-5f2c-44b7-a9ba-5856b7c70060 · outbound

This paper cites Mitre corporation.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Mitre corporation

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.830194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.033048Z digest=sha256:3953fb8e027f765dd36b7523483b1afe5b6cf0beb9c4a7fcccbb7e751ecbc6fb

Observation b320f51f-c304-42a8-8b7c-c5df9b80722a · outbound

This paper cites Common weakness enumeration (cwe).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common weakness enumeration (cwe)

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.814428Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.097151Z digest=sha256:291c93cd80211cef95b0b23401cd898a160fb5ca60b9ed2e37093cd2fd3763bf

Observation 1b014856-3bcf-442e-97f5-7e3e92b09764 · outbound

This paper cites National vulnerability database (nvd).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software National vulnerability database (nvd)

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.799050Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.228485Z digest=sha256:d73ec83355d1aa180221b2f4ddba9334a24ab32db43d5daee30e6ad3dbd7021e

Observation bffd80ae-84a7-41c1-94e5-966103df42b6 · outbound

This paper cites What are weak links in the npm supply chain?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software What are weak links in the npm supply chain?,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.784096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.335827Z digest=sha256:8b7078d0eb2a5f21256d4f03c862967093593d7f61d15d0be8fa37bf83b72287

Observation 2ae82ce8-f748-48ad-ab89-f397bce5bce6 · outbound

This paper cites github/advisory-database,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software github/advisory-database,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.769238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.410880Z digest=sha256:5e85f9cdd552728e594ac0b499fa662edcfa0bc1ae9798c59bad1e14664a19f8

Observation d1dc5f18-f1c9-4dc3-a4b0-f900b9cf6b12 · outbound

This paper cites Snyk vulnerability database.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Snyk vulnerability database

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.754364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.472896Z digest=sha256:9115072eb640271fe6fcb3a1a228b5ffe317a4103011e4b9d66264d3919b37e8

Observation 5bc59b39-5fef-40ef-8e01-698213cccd15 · outbound

This paper cites Libraries.io - discover open source libraries.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Libraries.io - discover open source libraries

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.736896Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.507508Z digest=sha256:89c91e74e185e64a9b79a3028326da508cbacc0ede9d61ba96522f5ad3ef1da5

Observation eb1f0467-7037-45ab-92e5-8ac7236d049f · outbound

This paper cites Build software better, together.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Build software better, together

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.720966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.522755Z digest=sha256:d5063962ef33dff8eb9e57aee25ce6a367a85ed654f5b577be4cae114c29a7e4

Observation 4ae11505-3725-4faa-abf4-65357f71e16f · outbound

This paper cites Open Source Vulnerability format - Open Source Vulnerability schema,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open Source Vulnerability format - Open Source Vulnerability schema,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.706420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.527494Z digest=sha256:6ab87c86d9f95137e35b3e0906948d2ea4574d78700da13d3a688d546d55a433

Observation 22d4a959-6e5b-4c6c-b52e-ea9b513bfdf2 · outbound

This paper cites On measuring vulner- able javascript functions in the wild,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On measuring vulner- able javascript functions in the wild,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.690884Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.531505Z digest=sha256:4fd893391b168e027f6889a6e47d89a127ccc2e043ca994416431e52adb5a831

Observation 7f3cd61e-829a-4387-8198-12e83aaa323f · outbound

This paper cites To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.675934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.535604Z digest=sha256:bd9e69f1399bc32dc1ea44b02816b3da8727e1172c7fb23353dd390d16523671

Observation bd22e318-170c-424c-afe0-9e77cde90a0b · outbound

This paper cites Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.658690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.539935Z digest=sha256:a4f3d163960b036c1edd7f6bd382155256a5aaf0958053a230d66a1b80ff11c5

Observation 2ac46f0c-9e02-4125-8e77-be517112cdfb · outbound

This paper cites Can Large Language Models Find And Fix Vulnerable Software?.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Can Large Language Models Find And Fix Vulnerable Software?

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:18.544516Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:18.544516Z digest=sha256:de71bc9a1a73718b5196c6b717fe332b0fef9e2c159045e51b083715c57f39b0

Observation 818cc7be-1636-47c1-b833-763a2f2c67fd · outbound

This paper cites Wayback machine,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Wayback machine,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.640685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.549508Z digest=sha256:0059a550fd2e1fc481d5a61edf4beb8637327abd22019de76599cd1145f1c9f3

Observation 9bbf87f5-0e75-48c3-b2d6-79275ef24df3 · outbound

This paper cites Log4shell: The vulnerability explained,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Log4shell: The vulnerability explained,

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.623664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.554762Z digest=sha256:a2270823776681089803899916d19c1769e82a25c528676c6abb6366c5f5d18e

Observation 4f958e5b-28d2-448d-8cda-d275e8f68bcf · outbound

This paper cites US govt offers $10 mil- lion bounty for info on Clop ransomware.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software US govt offers $10 mil- lion bounty for info on Clop ransomware

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.605382Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.560330Z digest=sha256:9e4640d5f41affe8f14333e128aad9e7da90c5c727b40dadd95fbc523f48b78b

Observation 4d373fca-9e60-4013-bfa3-4d3b894b665e · outbound

This paper cites Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.587946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.565889Z digest=sha256:83c10a44637f5161f0d561bce8a273b05a108c7d2d06e93dbef4e2e49a512870

Observation a5e49f92-9df2-4a23-9e56-06d94861ae7c · outbound

This paper cites The SolarWinds Cyber-Attack: What You Need to Know.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The SolarWinds Cyber-Attack: What You Need to Know

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.569293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.571537Z digest=sha256:33e966c6d350cd20090f2fe4932cdba9894d7a2c4ed681414611137218f27d82

Observation 3bb42e3c-23da-4bde-85af-be3f59a99dab · outbound

This paper cites Go modules reference.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go modules reference

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.551478Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.577357Z digest=sha256:abfaa04bbb39f6b8683f0ecb37feae6ca00697be0b4cbfb08fcf4c5e43c530c1

Observation 7bfbb399-eaf0-4c14-bb08-12734ab2f5db · outbound

This paper cites Go proxy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go proxy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.535752Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.582923Z digest=sha256:0a058facaa909096093b1bc07004908882b2874eb3f58ddc1c81b53e79acf220

Observation 7db59566-1e16-4fcf-a710-e4ce2e86333a · outbound

This paper cites Using theGO111MODULEeverywhere!.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Using theGO111MODULEeverywhere!

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.520383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.588752Z digest=sha256:9fa4a608bdb9e2436a3aa956dbe8f97435d75891570e1379eb9ca0989d49d894

Observation cbd118c2-f823-4dac-ac74-e26e55b8fdc8 · outbound

This paper cites I know what you imported last summer: A study of security threats in thepython ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software I know what you imported last summer: A study of security threats in thepython ecosystem,

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.503677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.594853Z digest=sha256:b3c40b28e37c8f5956919e5c5266a248b7d7da017fce9f51c2b1ce7112e30ca2

Observation cc9e079c-5451-42cc-bd30-93b5843442df · outbound

This paper cites An empirical study of malicious code in pypi ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical study of malicious code in pypi ecosystem,

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.486592Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.600474Z digest=sha256:f5f32ab705c7b7559f0914f151b2bcb83d5970afa2362576580afeac4cca2419

Observation cf8d7c1b-6b99-4586-a391-111db2112e78 · outbound

This paper cites Backstabber’s knife collection: A review of open source software supply chain attacks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Backstabber’s knife collection: A review of open source software supply chain attacks,

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.469936Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.605869Z digest=sha256:914d988ffdfb306bed5be10ff6b414dbfbeb113eea56d7ad77373ca419a65b99

Observation fd3be95a-8ca8-4e0a-a258-636afb299d37 · outbound

This paper cites Dependency confusion: How i hacked into apple, microsoft and dozens of other companies.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dependency confusion: How i hacked into apple, microsoft and dozens of other companies

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.454775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.611636Z digest=sha256:c732ecb7de2b3ea0d996724a2dc17a165dac1e87e89f94e8db2e7bdf74bd2936

Observation a8050465-59ea-486a-8f8f-c490a36bf1db · outbound

This paper cites npm dependency confusion attack targeting gxm refer- ence.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software npm dependency confusion attack targeting gxm refer- ence

Reference 56

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.438315Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.617257Z digest=sha256:bd9061ff65cdbdc483baff610eb8a43254ff0e27714d575391caeed600c66a7c

Observation 08c35435-1063-460f-9930-4e19a7621d63 · outbound

This paper cites SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.422985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.621862Z digest=sha256:e04cd6d8904ec8ceb44977cc9738af2603be45ace336c44d76c8216e1baa1e01

Observation b918144e-93c5-4af9-a617-2d1d9c50dc2a · outbound

This paper cites SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.407686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.627419Z digest=sha256:d0b9ad7d0da70a344e89dec348aa167d45feb058a538eba0cfe8d2aca20c311b

Observation 6655a007-0d2c-4e18-8ab0-252f3f233988 · outbound

This paper cites SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.388479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.632208Z digest=sha256:1ecb0183d5907149918032e659a44f363c7b9e9025decb74c6fc3df55fb34951

Observation d609e2c2-40e1-472a-984e-692dabcdf8bc · outbound

This paper cites SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.370302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.637451Z digest=sha256:ec3ddd51c25fd5e7d63e03dc7cc3f4d0de03979ea53cfdab7b88ab1f596eb502

Observation 460f554d-12f2-4b30-a58f-967521453e9d · outbound

This paper cites The family of safe golang libraries is growing,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The family of safe golang libraries is growing,

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.353618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.641658Z digest=sha256:1ba80d5f4becb0575d73bfd3f35f38bfdc5eea4e9f875722876c6c44f14d7f34

Observation 6c340277-630c-483e-8fd4-c0a1ae15ad9f · outbound

This paper cites Introducing npm package provenance,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Introducing npm package provenance,

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.321296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.652926Z digest=sha256:d8380444cf3d73b0fa95ddb9da890325acee7ded202d5c734e5f8bc33c01848d

Observation f43ba960-d51d-4c9c-9c2f-2d46da608ec6 · outbound

This paper cites rc - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software rc - npm package,

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.307145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.658069Z digest=sha256:771b8f00ef5682e3193fe7cb8992017bdbdc306ae6066934e0a84d95883120d2

Observation 83df5e8f-6cd0-4bf1-91cb-2f31480d49f0 · outbound

This paper cites coa - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software coa - npm package,

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.290423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.663477Z digest=sha256:037f171774a276672386174ae34dba21787c1eb873d0aa4a89bb52fb69353a1e

Observation 04a2446c-9b37-4314-8260-0a166bce569f · outbound

This paper cites ua-parser-js - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software ua-parser-js - npm package,

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.275173Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.668631Z digest=sha256:08e7f92259da12d55b4b72ce03ffa195872d614056bffaa5a459b803d77adf80

Observation 0d2f2250-1a1d-4c54-8964-4adfd96396c5 · outbound

This paper cites CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.258890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.673125Z digest=sha256:93d3a265f5fc447fa10eab08735a42bb1f6522e5f1d53400e4765285aca44e00

Observation 51c12b66-1093-46cf-9fb6-dcc75e9cb172 · outbound

This paper cites CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.242392Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.679392Z digest=sha256:26233d451dd5a310d46a62c189f5b86aa9cfe619d03632fcc1752934f72b6f11

Observation 0b319214-79d8-4500-99f1-a6886b9b9115 · outbound

This paper cites CWE - CWE-94: Improper control of generation of code (’code injection’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-94: Improper control of generation of code (’code injection’),

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.224971Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.684025Z digest=sha256:7150034b34250562efd4db9d90e8408e25f440998ae7efb01105af62934de445

Observation 98f0c9b2-0988-486b-9f6e-46089db11c87 · outbound

This paper cites CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.207256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.688598Z digest=sha256:a3c15af97dcfe8e6a7e5fd592035e2595e83b0813f12f607691c562f3b3a3f0d

Observation dfcc63f4-7ac3-4653-92e5-0c25dc8599ba · outbound

This paper cites CWE - CWE-122: Heap-based Buffer Overflow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-122: Heap-based Buffer Overflow,

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.187726Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.693550Z digest=sha256:c088a5201ccdab9c52664ed0c859ab95d91f6d3fb36f2e2a1e816747be48ce3d

Observation 06281f84-9a0f-42fd-b97f-4b17d5cb156c · outbound

This paper cites CWE - CWE-416: Use After Free,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-416: Use After Free,

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.168465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.698744Z digest=sha256:47333d2785e7291049864907a1e4d86119ef4503f8f532f4af4e7d73c35d0020

Observation 10f4620b-10d3-4565-a5a8-2b963af0bf8e · outbound

This paper cites CWE - CWE-787: Out-of-Bounds Write,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-787: Out-of-Bounds Write,

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.150007Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.704072Z digest=sha256:10f7a7a01e056a9598a0e085b7412cb4eb8d0ea48320b27f6e5565f760426670

Observation 716190b2-6695-442c-95e7-6479213f2e7c · outbound

This paper cites Range operator.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Range operator

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.131632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.709547Z digest=sha256:c596f4058757aaa4c7dba5179bf5a40d92b07d56d096502bbab752f12adbd221

Observation cb387af2-a3bf-40be-9b7e-3e21bdc120b6 · outbound

This paper cites CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.112327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.715609Z digest=sha256:50c7f224dd3adbfbd2e5af4656b8302789eb8746740ac17c4e46863e26c6692a

Observation d8061490-4e54-4446-8a82-9c5360954fe8 · outbound

This paper cites Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision

Reference 77

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.069894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.725559Z digest=sha256:02e020d6773fbdb4537ba2460790b4874411d9d9b6d984de34dd23e6e49306f2

Observation 22160637-cf91-47b3-bada-4134ff7bac9d · outbound

This paper cites These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.051532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.730660Z digest=sha256:f63c6dda3f0341905ad752ee4fe7481aea8ca34b1b0c6cb112060ec17d3d5fc7

Observation 78f0fbbc-bbdf-4e74-ad8a-ef5daf63de99 · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 79

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:41:19.030216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.736392Z digest=sha256:063d8654a0f4c7eda6bdd58b8a4ea0bcffa57058ba5678da979ca0108a10a10d

Observation 16fe951f-63ff-4596-aacd-d74996544db0 · outbound

This paper cites 14 TABLE 4.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 14 TABLE 4

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:18.934575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.741692Z digest=sha256:e1db58797a5351ab5ae442a2a1762f97e79622527d6f7d00f72fcef3acc82958

Observation 0c704d7b-8c49-4ca6-b4d7-457b83206b5b · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 2023

Resolution
parse uncertain
raw_fallback, observed 2026-08-07T00:41:19.337461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.647618Z digest=sha256:d2355e472ab9350f72fa32b69a5196723ad6eb1a4093ec4eb6c5c5b6da444567

Observation 4e69e5be-a829-457a-9041-796efe152917 · outbound

This paper cites Appendix.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Appendix

Reference 2024

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.086835Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-07T00:41:18.720769Z digest=sha256:bd548e28bff4d94ca137c077b39ecd197a2a2ae351e0c279801134ca1ec16ba9

Pith citing papers

Observation 5b13c0ec-fa79-46e3-a1e0-51d50cbe5c89 · inbound

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images cites this paper.

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-06T00:31:19.938494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=pdf_text observed=2026-08-06T00:31:17.975540Z digest=sha256:38d31af1bd0209f975a2251d82023c72670c89f2aaadd56301b886dbd557be5f