Pith. sign in

Paper Citation Record · LEDGER

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

As of 13 August 2026, this Paper Citation Record lists 80 of 80 outbound references and 1 inbound Pith citation observation for arXiv:2506.12995.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.12995 v1

Coverage vector

measured 80 of 80 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:41:18.741692Z

measured 81 of 81 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-13T06:32:02.005865+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T00:31:17.975540Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T00:31:19.886341Z

Reference resolution

80 of 80 outbound references displayed

  • verified exact0
  • verified fuzzy75
  • unresolved4
  • parse uncertain1
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ae68133b-e5ea-45d2-bb5b-d712bacc2f99 · outbound

This paper cites As- apy: A python library for aerospace simulation analysis,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software As- apy: A python library for aerospace simulation analysis,

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.254582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:15.391419Z digest=sha256:f186d87b950ceb12a55774c553bf6ad75dfe0848131414f9e0f9095f31a89d24

Observation 43dcde1f-e298-42d1-9075-9dde4bb1adc0 · outbound

This paper cites A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.240263Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:15.478313Z digest=sha256:75c673125e73d71c34051077e971ca2e27f5a4f9fd018b784348146d7b92f691

Observation d5e403b9-6522-4cb5-aed6-2b3b416ebbaa · outbound

This paper cites Formation control method based on artificial potential fields for aircraft flight simulation,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Formation control method based on artificial potential fields for aircraft flight simulation,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.225801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:15.613314Z digest=sha256:d8f53b372f7901333fd53b63d07d93e414bc068539d5b6df20869901230f8e77

Observation 1027d3e8-c8d3-48e3-a4d4-c1e0fb7a86cb · outbound

This paper cites Open source soft- ware and global entrepreneurship,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source soft- ware and global entrepreneurship,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.210324Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:15.694678Z digest=sha256:a1a48b36c1c679bafc27e2b1a56e778d97201108908175e0bbd8c3954fcc41a7

Observation 976373d7-feb5-498d-b9e5-f5985fd785fd · outbound

This paper cites Fingpt: Open- source financial large language models,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Fingpt: Open- source financial large language models,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:15.817244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:15.817244Z digest=sha256:90bba07f0f3b495b91516533f1a01c9a0c928e8f05891dd3de12eec62efe31f8

Observation 274a5120-5d37-47f9-a495-30c0483ea848 · outbound

This paper cites Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.195515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:15.932060Z digest=sha256:f1c77ceb7fdef6094b9007aa4dbc1fa0c4f0e96f6a98f6834683580f5da3c725

Observation df7cbab4-0dd6-4263-aec2-62d87431b68d · outbound

This paper cites Open source development: A double-edged sword,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source development: A double-edged sword,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.180371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.036048Z digest=sha256:2852214aa8ffbaf97b57fd05c1992ac0755c375f623ae12084d1b8f5a207b98d

Observation 9fdfc375-7e45-48b3-9118-b47296ff5782 · outbound

This paper cites Impact of using open source software on cyberse- curity,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Impact of using open source software on cyberse- curity,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.166617Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.157152Z digest=sha256:7b6a74038987a3a36d282fe45c9bc9b1494e4868c8409ff1bd81cf37af4cbcf5

Observation c6973a6f-42bd-40c2-9f23-dd12c4a5724f · outbound

This paper cites 27 malicious pypi packages with info- stealing capabilities discovered,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 27 malicious pypi packages with info- stealing capabilities discovered,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.149657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.274147Z digest=sha256:8308efe792abe4d1293912454d75eb3325ea47ddf240a1e0081dd78633c1b5de

Observation a9b0eb19-5827-4e9a-820e-b35cbc440795 · outbound

This paper cites The hidden economy of open source software,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The hidden economy of open source software,

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.134558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.367592Z digest=sha256:7a7b179c9ea56541bf26fae5ae91c0dceed893c63d7841f65a0269daf906f0b6

Observation a49cbc08-fea9-4f07-80ac-80ac3ab4a3b7 · outbound

This paper cites Dozens of npm packages caught attempting to deploy reverse shell,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dozens of npm packages caught attempting to deploy reverse shell,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.119693Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.482235Z digest=sha256:c9da8acbb12e42912c144d8ebac9e21aff7337362723af8f375e0b50ad1db1ae

Observation 737c72ec-5921-480a-aaf2-fee0dc79e823 · outbound

This paper cites Hundreds of malicious python packages found stealing sensitive data,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Hundreds of malicious python packages found stealing sensitive data,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.103553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.599845Z digest=sha256:624863dfa49797f1f7898af4b3af2950caf9ac5ce124215723b38e92b7170911

Observation 30f7f07b-caf3-499a-b451-24b3fb21d327 · outbound

This paper cites Securing open source software act.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Securing open source software act

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.088767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.738793Z digest=sha256:455b4715d693992e0ce677db12cc78418f621c5be332974151a8f1d24c7a548b

Observation afcfe3a7-cbb8-4f34-b711-a172ef9ec48c · outbound

This paper cites Summary of the 2023 request for information on open source software security.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Summary of the 2023 request for information on open source software security

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.074844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.899241Z digest=sha256:2b00ee5ce78fe9ac656ede791f409d0c1908d51c286e8e124638895896f7dda4

Observation dcfea0ad-182c-4208-ae41-dca6b326ee85 · outbound

This paper cites Cisa open source software security roadmap.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Cisa open source software security roadmap

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.058420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:16.959603Z digest=sha256:8d9bc5ab9c7420df1d07891ba6673c00813d45fece36e0e156c49ef8d49e932e

Observation 43e960de-537c-41b6-a1f3-fdd546ebc97e · outbound

This paper cites Top web development languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Top web development languages

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.041151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.094990Z digest=sha256:bdb01ab71db3d417e2da1c4bee1fdd19d03b07f759a64a81d44d6f2c22753847

Observation fe91b5eb-f2a1-42ec-9213-efe7d0c40ea4 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.025113Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.177631Z digest=sha256:6273956bb657fa73cf5a24331f396deed34563ad8164fcee3ee1cb0400cb21f9

Observation 47833b2c-748c-4e62-ac14-25736f0f99b1 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.009304Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.229547Z digest=sha256:8b5ee6652d990ed1e305bfd13bd92b3abfcca4e6429435a0d7717805c17c1449

Observation 46861d48-4678-43f6-8729-2932bbfa6e84 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.994200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.282845Z digest=sha256:0d977e37da0263703a2f120b6b086497793f6f5b4d04cec5bdd0ed1b1208c49d

Observation ab98dd44-5c3a-4d9d-939d-441a5443116e · outbound

This paper cites Empirical analysis of security vulnerabilities in python packages,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Empirical analysis of security vulnerabilities in python packages,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.979876Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.322669Z digest=sha256:6b384389fbfaeb1e0d0138c30f169d5a44e120799f2db6432a79cf87cf317b46

Observation 3c138664-fe12-4918-bf5b-2fcb1929325f · outbound

This paper cites Small world with high risks: A study of security threats in the npm ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Small world with high risks: A study of security threats in the npm ecosystem,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.964782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.365173Z digest=sha256:a5a92d5e369ffec2287350c9f9d3de161b954ca458024d3103d99d71d5a8367d

Observation 6240d4cf-84af-4617-94e7-d08fbd221131 · outbound

This paper cites Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:17.469971Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:17.469971Z digest=sha256:6ced055f806e3d03f048ae6459e563bc5432230d25cd97827705d060b10dfe2a

Observation 88f464a8-a85b-490d-9ae6-4fd1d136787f · outbound

This paper cites Do software security practices yield fewer vul- nerabilities?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Do software security practices yield fewer vul- nerabilities?,

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.950057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.591706Z digest=sha256:2b1049dda05f90661e381323ae43b2e78d4773706a93347e7ad77bbfa87fd082

Observation 4aa3aa75-94ea-4586-a50d-a95ad31e1379 · outbound

This paper cites An empirical comparison of dependency issues in oss packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency issues in oss packaging ecosystems,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.933844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.650349Z digest=sha256:31c16b76dcb3efd3f7c234a721a0ff85443b6aad7a218f6a383422c4eee0321a

Observation effc3bd8-b6cc-43a0-835e-8f81cd3a3fb4 · outbound

This paper cites An empirical comparison of dependency network evolution in seven software packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency network evolution in seven software packaging ecosystems,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.919148Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.725197Z digest=sha256:56c2964035209e4dc0eb067ef44e2fea001ec7874adf90f6784d0c65a6a6f4d9

Observation ac7a2834-9612-4f8c-8d04-bdc76155363d · outbound

This paper cites Structure and evolution of package dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Structure and evolution of package dependency networks,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.904636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.844856Z digest=sha256:8be44c72646edeb5a0f90e4e3572b351ce23f99376e5522e0c8e33273e2e64ca

Observation d78b4291-1340-4d26-b57c-fb578ea630e3 · outbound

This paper cites On the impact of se- curity vulnerabilities in the npm package dependency network,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of se- curity vulnerabilities in the npm package dependency network,

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.889080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.872690Z digest=sha256:2fb95a880ffafe9daac04b89674b698cddbdf7751e7b46a773dc2a1f5966218b

Observation f2c65bf3-3524-4af7-b76f-fa825ddb501c · outbound

This paper cites On the impact of security vulnerabilities in the npm and rubygems dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of security vulnerabilities in the npm and rubygems dependency networks,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.874507Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.877137Z digest=sha256:4bb25b68f7f5327b4cc28f59b0e3938a6500a6818ac8910b6f666956f59ed643

Observation 8980cd96-0fb6-4e47-b513-50ea5d6bbff8 · outbound

This paper cites Vulnerable open source dependen- cies: Counting those that matter,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Vulnerable open source dependen- cies: Counting those that matter,

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.859695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.893228Z digest=sha256:ef0de178b4744482a54b286938e57098883f5386326570b8c189b843d5ca2228

Observation 3527b220-e0da-4787-bec3-7926dd5f7d3f · outbound

This paper cites Common vulnerabilities and exposures (cve).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common vulnerabilities and exposures (cve)

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.843838Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:17.973348Z digest=sha256:957f084cfdf705c2abc986b93bc9629bad105ed82c5f6fad5bed93623a959f25

Observation 2e20f57f-5f2c-44b7-a9ba-5856b7c70060 · outbound

This paper cites Mitre corporation.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Mitre corporation

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.830194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.033048Z digest=sha256:5c104e73e007b483007df853d13f720e5a1a97c3cd8de0e78001886d390772f3

Observation b320f51f-c304-42a8-8b7c-c5df9b80722a · outbound

This paper cites Common weakness enumeration (cwe).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common weakness enumeration (cwe)

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.814428Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.097151Z digest=sha256:0ac68040ab76af66d8990df7e1b576f94983696ada184afbfed6abfa3da62904

Observation 1b014856-3bcf-442e-97f5-7e3e92b09764 · outbound

This paper cites National vulnerability database (nvd).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software National vulnerability database (nvd)

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.799050Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.228485Z digest=sha256:b60aa50a0be7c10defe63346decb3b174efdbde84e53fc3e6788712076d6698b

Observation bffd80ae-84a7-41c1-94e5-966103df42b6 · outbound

This paper cites What are weak links in the npm supply chain?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software What are weak links in the npm supply chain?,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.784096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.335827Z digest=sha256:fe6db0e1b1d822fec30dcc35987d7d6b3bc093c9fc266e20f017ca556d0861fc

Observation 2ae82ce8-f748-48ad-ab89-f397bce5bce6 · outbound

This paper cites github/advisory-database,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software github/advisory-database,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.769238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.410880Z digest=sha256:644cf86287fc38ac38a1f5dff9fe24b6b0a9aefbf56075057d410f43ae85db2e

Observation d1dc5f18-f1c9-4dc3-a4b0-f900b9cf6b12 · outbound

This paper cites Snyk vulnerability database.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Snyk vulnerability database

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.754364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.472896Z digest=sha256:7174890ecea7246562e18bb89b6dc24baafbbaff1a6908b2ddf4060ba3dd0c4d

Observation 5bc59b39-5fef-40ef-8e01-698213cccd15 · outbound

This paper cites Libraries.io - discover open source libraries.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Libraries.io - discover open source libraries

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.736896Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.507508Z digest=sha256:f844f11198d38fd6b57548e127a4ab245aae9611de00e182cc40adc5020b591e

Observation eb1f0467-7037-45ab-92e5-8ac7236d049f · outbound

This paper cites Build software better, together.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Build software better, together

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.720966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.522755Z digest=sha256:2fb28c429f444fa228ccc98b6ce2df9cda1ca6f7462117c1174153606a689d2e

Observation 4ae11505-3725-4faa-abf4-65357f71e16f · outbound

This paper cites Open Source Vulnerability format - Open Source Vulnerability schema,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open Source Vulnerability format - Open Source Vulnerability schema,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.706420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.527494Z digest=sha256:26ff3354e8b0a1bcc46a55ca027864dfb6cccefd63ca976642f8b26d7bf1ae9a

Observation 22d4a959-6e5b-4c6c-b52e-ea9b513bfdf2 · outbound

This paper cites On measuring vulner- able javascript functions in the wild,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On measuring vulner- able javascript functions in the wild,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.690884Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.531505Z digest=sha256:99eb283c2ec032c16c1e4fe1aeca30aa2e3e0699b351a71e8036cdf03bef6f33

Observation 7f3cd61e-829a-4387-8198-12e83aaa323f · outbound

This paper cites To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.675934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.535604Z digest=sha256:54f6bce16783040c81b4033e7b604aab4f907f6da20dfd674dccd95d849cdd19

Observation bd22e318-170c-424c-afe0-9e77cde90a0b · outbound

This paper cites Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.658690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.539935Z digest=sha256:c720aea6f7e43860ebd2ca4958c932dbe421fbed97aad29d27ae7edbe4b87297

Observation 2ac46f0c-9e02-4125-8e77-be517112cdfb · outbound

This paper cites Can Large Language Models Find And Fix Vulnerable Software?.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Can Large Language Models Find And Fix Vulnerable Software?

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:18.544516Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:18.544516Z digest=sha256:4f9db40b2304feff569fa72423ba964c98482e9979761536c42377a96be6c01e

Observation 818cc7be-1636-47c1-b833-763a2f2c67fd · outbound

This paper cites Wayback machine,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Wayback machine,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.640685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.549508Z digest=sha256:1603a26182d3d26237f884c2dd344d8dc841ed0015d9b38ae70e05d1cf03e883

Observation 9bbf87f5-0e75-48c3-b2d6-79275ef24df3 · outbound

This paper cites Log4shell: The vulnerability explained,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Log4shell: The vulnerability explained,

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.623664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.554762Z digest=sha256:b47f75ef73e1877957ad0e517d87b18e579e9257fcb3230ac24e82693b2abef5

Observation 4f958e5b-28d2-448d-8cda-d275e8f68bcf · outbound

This paper cites US govt offers $10 mil- lion bounty for info on Clop ransomware.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software US govt offers $10 mil- lion bounty for info on Clop ransomware

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.605382Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.560330Z digest=sha256:387dde28e01ffc62a6e8962f0b48f92b6390979ac0acdab16bdc43bf25abdf7b

Observation 4d373fca-9e60-4013-bfa3-4d3b894b665e · outbound

This paper cites Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.587946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.565889Z digest=sha256:9868b9b5fb859334b4d3e024b3ccbf02b4922409376b38e4dbeb96cba88d626d

Observation a5e49f92-9df2-4a23-9e56-06d94861ae7c · outbound

This paper cites The SolarWinds Cyber-Attack: What You Need to Know.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The SolarWinds Cyber-Attack: What You Need to Know

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.569293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.571537Z digest=sha256:59ed1e94cf046ff9476968ed8f514b66d7c10def0db81784450529346e794529

Observation 3bb42e3c-23da-4bde-85af-be3f59a99dab · outbound

This paper cites Go modules reference.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go modules reference

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.551478Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.577357Z digest=sha256:1a44fa28cc93023a4716404c04e4dae2c0a2e967831f1b695be7d699d569e27d

Observation 7bfbb399-eaf0-4c14-bb08-12734ab2f5db · outbound

This paper cites Go proxy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go proxy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.535752Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.582923Z digest=sha256:e268b44b9fa391a7336500e928cd45563b739481abbf75ad7a34b2f22367c1fb

Observation 7db59566-1e16-4fcf-a710-e4ce2e86333a · outbound

This paper cites Using theGO111MODULEeverywhere!.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Using theGO111MODULEeverywhere!

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.520383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.588752Z digest=sha256:ee7a53fc7e1db5927dde9a19c2af4f9c7ff98326832f05e2ba1c83cf4c946dba

Observation cbd118c2-f823-4dac-ac74-e26e55b8fdc8 · outbound

This paper cites I know what you imported last summer: A study of security threats in thepython ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software I know what you imported last summer: A study of security threats in thepython ecosystem,

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.503677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.594853Z digest=sha256:ed0bf7991931adcfd39bd1a22624ec9bc3c1c0c7dc03b2ecd4d8c03e1f23cd0b

Observation cc9e079c-5451-42cc-bd30-93b5843442df · outbound

This paper cites An empirical study of malicious code in pypi ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical study of malicious code in pypi ecosystem,

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.486592Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.600474Z digest=sha256:f6da5130d9c393ec2e3d6c98c841594ab46fd9dc9659c6a5733c0a4129e49b95

Observation cf8d7c1b-6b99-4586-a391-111db2112e78 · outbound

This paper cites Backstabber’s knife collection: A review of open source software supply chain attacks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Backstabber’s knife collection: A review of open source software supply chain attacks,

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.469936Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.605869Z digest=sha256:07dd1f6603f1e0e2adce03821577f29b6debf01f0b428bb6015684b1afb1b60f

Observation fd3be95a-8ca8-4e0a-a258-636afb299d37 · outbound

This paper cites Dependency confusion: How i hacked into apple, microsoft and dozens of other companies.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dependency confusion: How i hacked into apple, microsoft and dozens of other companies

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.454775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.611636Z digest=sha256:188ac62a2780a72ab644dcd7c14b88987428bea9e29b7c09657ec7997a0e2851

Observation a8050465-59ea-486a-8f8f-c490a36bf1db · outbound

This paper cites npm dependency confusion attack targeting gxm refer- ence.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software npm dependency confusion attack targeting gxm refer- ence

Reference 56

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.438315Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.617257Z digest=sha256:ede19b71985f53d02b64c75f9b9718c503cf3645938847d5a57f0692dd594cc0

Observation 08c35435-1063-460f-9930-4e19a7621d63 · outbound

This paper cites SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.422985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.621862Z digest=sha256:88e9d17340ac71c20c68bb6cdb2587a70523fe6cf706ab765a8e50f877f42467

Observation b918144e-93c5-4af9-a617-2d1d9c50dc2a · outbound

This paper cites SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.407686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.627419Z digest=sha256:f52a8f58ae5fe9609744fb84af1710ab728542a714b926c4fde81458453a38e7

Observation 6655a007-0d2c-4e18-8ab0-252f3f233988 · outbound

This paper cites SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.388479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.632208Z digest=sha256:b065eea91ae8a38e7421495ec0b645778c6c795056d847eeaed4ab8b30492d0b

Observation d609e2c2-40e1-472a-984e-692dabcdf8bc · outbound

This paper cites SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.370302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.637451Z digest=sha256:583396da1d0bcb0c4452a2aa73af32ac3104fd65a9adac5bd77383488226c5e9

Observation 460f554d-12f2-4b30-a58f-967521453e9d · outbound

This paper cites The family of safe golang libraries is growing,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The family of safe golang libraries is growing,

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.353618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.641658Z digest=sha256:6956cf5337fa25418a6080b6a4b61964b5bd4d8e237e1b0bca53b04df1056d88

Observation 6c340277-630c-483e-8fd4-c0a1ae15ad9f · outbound

This paper cites Introducing npm package provenance,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Introducing npm package provenance,

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.321296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.652926Z digest=sha256:484b611ddfab805fe2d8a8bf2938110d6bd08f4ea060d1f555b8e32c36a9ad22

Observation f43ba960-d51d-4c9c-9c2f-2d46da608ec6 · outbound

This paper cites rc - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software rc - npm package,

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.307145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.658069Z digest=sha256:ef25e401c6078392417db2a774d121624b8c0d24eef70fd5f9d6f8dcb0773db2

Observation 83df5e8f-6cd0-4bf1-91cb-2f31480d49f0 · outbound

This paper cites coa - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software coa - npm package,

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.290423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.663477Z digest=sha256:4a7fb4289c712952bb7e8e9ce8ede24e3c6bc8aa155d1f733f8ac789329f1f78

Observation 04a2446c-9b37-4314-8260-0a166bce569f · outbound

This paper cites ua-parser-js - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software ua-parser-js - npm package,

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.275173Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.668631Z digest=sha256:2af504aa75490b0007d8fc5244d2643762befda3e10d0d55bc70349c040617e3

Observation 0d2f2250-1a1d-4c54-8964-4adfd96396c5 · outbound

This paper cites CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.258890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.673125Z digest=sha256:db75522a6d3bdbfec1bcdf61105901b18c06faf5448287f1a1b66de8aacc9877

Observation 51c12b66-1093-46cf-9fb6-dcc75e9cb172 · outbound

This paper cites CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.242392Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.679392Z digest=sha256:16d7d49e7afc11162ae4c29aad6959a6e6983e83b43da68aad4cdf99dccb468a

Observation 0b319214-79d8-4500-99f1-a6886b9b9115 · outbound

This paper cites CWE - CWE-94: Improper control of generation of code (’code injection’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-94: Improper control of generation of code (’code injection’),

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.224971Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.684025Z digest=sha256:76f9eeb61467f475a3ffc64eb4cecd5c28253a3a7eaeea40bb2dc36e283a1a38

Observation 98f0c9b2-0988-486b-9f6e-46089db11c87 · outbound

This paper cites CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.207256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.688598Z digest=sha256:d44f70adaf57c80b8f4da3051056023373b74109174659c4ea494b7731a8ecbc

Observation dfcc63f4-7ac3-4653-92e5-0c25dc8599ba · outbound

This paper cites CWE - CWE-122: Heap-based Buffer Overflow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-122: Heap-based Buffer Overflow,

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.187726Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.693550Z digest=sha256:2089887722cffa6081cde6193c55771e5aea0125d7f17e10e97819bc04095ef1

Observation 06281f84-9a0f-42fd-b97f-4b17d5cb156c · outbound

This paper cites CWE - CWE-416: Use After Free,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-416: Use After Free,

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.168465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.698744Z digest=sha256:ef70639c3d416e1eb7dfc81be1bdacb91e9cc86a2088edcee0354c0e7456d3fc

Observation 10f4620b-10d3-4565-a5a8-2b963af0bf8e · outbound

This paper cites CWE - CWE-787: Out-of-Bounds Write,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-787: Out-of-Bounds Write,

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.150007Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.704072Z digest=sha256:9681c0c0857de812d73495272a2acb2f61a747a661839aaa40fc02e8f3b58dda

Observation 716190b2-6695-442c-95e7-6479213f2e7c · outbound

This paper cites Range operator.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Range operator

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.131632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.709547Z digest=sha256:330c671b6806bb992bbb8b032bcff8589a7dbc6db121678585c49bf4a4d7e2bf

Observation cb387af2-a3bf-40be-9b7e-3e21bdc120b6 · outbound

This paper cites CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.112327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.715609Z digest=sha256:61a1e5786a858a0b76e53da7b4ec0f9551ee4a72e0a5b365c2aa47dcf9762349

Observation d8061490-4e54-4446-8a82-9c5360954fe8 · outbound

This paper cites Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision

Reference 77

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.069894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.725559Z digest=sha256:325043ee0ba5e9aaf516a33eb258ee5a402fcd74b4f971d4a309eaea6a7b5932

Observation 22160637-cf91-47b3-bada-4134ff7bac9d · outbound

This paper cites These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.051532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.730660Z digest=sha256:99fbf3f5091dd6ee4fdbd97da53b04133eba95b66e342ad3bb847da4d6ab4e97

Observation 78f0fbbc-bbdf-4e74-ad8a-ef5daf63de99 · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 79

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:41:19.030216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.736392Z digest=sha256:84540994b54e6fc913fcfac417c9dd2ef46b39675f3fa10a20bafaf09521b645

Observation 16fe951f-63ff-4596-aacd-d74996544db0 · outbound

This paper cites 14 TABLE 4.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 14 TABLE 4

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:18.934575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.741692Z digest=sha256:8629e3af2d4bef226d1f1774f67660479f42d85fe43121732090e2a1c2c6762e

Observation 0c704d7b-8c49-4ca6-b4d7-457b83206b5b · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 2023

Resolution
parse uncertain
raw_fallback, observed 2026-08-07T00:41:19.337461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.647618Z digest=sha256:12ed5c5c09979c346efabbbc9c4d4d871449ea9b4a0333ef36aab1620e7b6928

Observation 4e69e5be-a829-457a-9041-796efe152917 · outbound

This paper cites Appendix.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Appendix

Reference 2024

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.086835Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-07T00:41:18.720769Z digest=sha256:4178f1ffed18a37d18c3a94ec8de5bdc7c3af66c014fcab6f650497063284f62

Pith citing papers

Observation 5b13c0ec-fa79-46e3-a1e0-51d50cbe5c89 · inbound

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images cites this paper.

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-06T00:31:19.938494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-06T00:31:17.975540Z digest=sha256:d2f55ad0d2998a9b83d8bc53133c718e6d70ea4665315328360e0566dde2b711