Pith. sign in

REVIEW 1 cited by

Tracking Patches for Open Source Software Vulnerabilities

Not yet reviewed by Pith; the record is open.

Re-run · record.json Download PDF Read on arXiv ↗

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2112.02240 v2 pith:VUA5WR67 submitted 2021-12-04 cs.SE cs.CR

Congying Xu , Bihuan Chen , Chenhao Lu , Kaifeng Huang , Xin Peng , Yang Liu This is my paper · ORCID
classification cs.SEcs.CR
keywords vulnerabilitiesdatabasessoftwarevulnerabilityexistinginformationopenpatch
verification ladder T0 review T1 audit T2 compute T3 formal

Signed reviews

No signed human review yet.

0 comments
read the original abstract

Open source software (OSS) vulnerabilities threaten the security of software systems that use OSS. Vulnerability databases provide valuable information (e.g., vulnerable version and patch) to mitigate OSS vulnerabilities. There arises a growing concern about the information quality of vulnerability databases. However, it is unclear what the quality of patches in existing vulnerability databases is; and existing manual or heuristic-based approaches for patch tracking are either too expensive or too specific to apply to all OSS vulnerabilities.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. SAVANT: Vulnerability Detection in Application Dependencies through Semantic-Guided Reachability Analysis

    cs.SE 2025-06 conditional novelty 6.0 of 10

    An LLM-driven dependency vulnerability detector reports 83.8% precision, 73.8% recall, and 78.5% F1 on 55 Java projects, outperforming two SCA baselines.

Pith tools