{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:3WI3X742XNYCEEIVPRYC7IW45J","short_pith_number":"pith:3WI3X742","schema_version":"1.0","canonical_sha256":"dd91bbff9abb702211157c702fa2dcea40ed8739a014498d2a7c5565d88d8b24","source":{"kind":"arxiv","id":"2503.24273","version":1},"attestation_state":"computed","paper":{"title":"Generating Mitigations for Downstream Projects to Neutralize Upstream Library Vulnerability","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Puhua Sun, Xiaohu Yang, Xing Hu, Xin Xia, Zirui Chen","submitted_at":"2025-03-31T16:20:29Z","abstract_excerpt":"Third-party libraries are essential in software development as they prevent the need for developers to recreate existing functionalities. However, vulnerabilities within these libraries pose significant risks to dependent projects. Upgrading dependencies to secure versions is not feasible to neutralize vulnerabilities without patches or in projects with specific version requirements. Moreover, repairing the vulnerability proves challenging when the source code of the library is inaccessible. Both the state-of-the-art automatic vulnerability repair and automatic program repair methods fail to a"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2503.24273","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-03-31T16:20:29Z","cross_cats_sorted":[],"title_canon_sha256":"e242fee33899d2ee40e36b0097622917ce586c45cd42cb67adc8e47683339661","abstract_canon_sha256":"5da1bc998c767274bb116947808da1a0d2301a22c4cc435c312eae815d18a40f"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:42:07.147360Z","signature_b64":"AxHOFBcXvW4LAXSMTCYbtmdCNw2OQtNeKQRUL8VrTFtsr4exvlIGHzccPIqdRs1k1zFqf2qsuV4zCgKIpy4lCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dd91bbff9abb702211157c702fa2dcea40ed8739a014498d2a7c5565d88d8b24","last_reissued_at":"2026-07-05T10:42:07.146874Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:42:07.146874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Generating Mitigations for Downstream Projects to Neutralize Upstream Library Vulnerability","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Puhua Sun, Xiaohu Yang, Xing Hu, Xin Xia, Zirui Chen","submitted_at":"2025-03-31T16:20:29Z","abstract_excerpt":"Third-party libraries are essential in software development as they prevent the need for developers to recreate existing functionalities. However, vulnerabilities within these libraries pose significant risks to dependent projects. Upgrading dependencies to secure versions is not feasible to neutralize vulnerabilities without patches or in projects with specific version requirements. Moreover, repairing the vulnerability proves challenging when the source code of the library is inaccessible. Both the state-of-the-art automatic vulnerability repair and automatic program repair methods fail to a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.24273","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.24273/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2503.24273","created_at":"2026-07-05T10:42:07.146929+00:00"},{"alias_kind":"arxiv_version","alias_value":"2503.24273v1","created_at":"2026-07-05T10:42:07.146929+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.24273","created_at":"2026-07-05T10:42:07.146929+00:00"},{"alias_kind":"pith_short_12","alias_value":"3WI3X742XNYC","created_at":"2026-07-05T10:42:07.146929+00:00"},{"alias_kind":"pith_short_16","alias_value":"3WI3X742XNYCEEIV","created_at":"2026-07-05T10:42:07.146929+00:00"},{"alias_kind":"pith_short_8","alias_value":"3WI3X742","created_at":"2026-07-05T10:42:07.146929+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2606.09060","citing_title":"ATTAIN: Automated Exploit Failure Analysis through Trace-Driven Diff Analysis","ref_index":5,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J","json":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J.json","graph_json":"https://pith.science/api/pith-number/3WI3X742XNYCEEIVPRYC7IW45J/graph.json","events_json":"https://pith.science/api/pith-number/3WI3X742XNYCEEIVPRYC7IW45J/events.json","paper":"https://pith.science/paper/3WI3X742"},"agent_actions":{"view_html":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J","download_json":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J.json","view_paper":"https://pith.science/paper/3WI3X742","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2503.24273&json=true","fetch_graph":"https://pith.science/api/pith-number/3WI3X742XNYCEEIVPRYC7IW45J/graph.json","fetch_events":"https://pith.science/api/pith-number/3WI3X742XNYCEEIVPRYC7IW45J/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J/action/timestamp_anchor","attest_storage":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J/action/storage_attestation","attest_author":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J/action/author_attestation","sign_citation":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J/action/citation_signature","submit_replication":"https://pith.science/pith/3WI3X742XNYCEEIVPRYC7IW45J/action/replication_record"}},"created_at":"2026-07-05T10:42:07.146929+00:00","updated_at":"2026-07-05T10:42:07.146929+00:00"}