{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:NMDLW3AZAFCTJAXM4EXPLCQ33G","short_pith_number":"pith:NMDLW3AZ","canonical_record":{"source":{"id":"2506.04987","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-06-05T13:00:19Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"66ab7c2c55e9317b90acba113b87253ab1202db8599f028ed3f9fbf11d5ce52e","abstract_canon_sha256":"214580aecb06eabfdb6f274a265ff6b01c739322ccc4d99e80d4b177107ba1a3"},"schema_version":"1.0"},"canonical_sha256":"6b06bb6c1901453482ece12ef58a1bd98b086bcf14ca2c5ae88955d1fe0f27c7","source":{"kind":"arxiv","id":"2506.04987","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.04987","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"arxiv_version","alias_value":"2506.04987v1","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.04987","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"pith_short_12","alias_value":"NMDLW3AZAFCT","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"pith_short_16","alias_value":"NMDLW3AZAFCTJAXM","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"pith_short_8","alias_value":"NMDLW3AZ","created_at":"2026-07-05T11:16:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:NMDLW3AZAFCTJAXM4EXPLCQ33G","target":"record","payload":{"canonical_record":{"source":{"id":"2506.04987","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-06-05T13:00:19Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"66ab7c2c55e9317b90acba113b87253ab1202db8599f028ed3f9fbf11d5ce52e","abstract_canon_sha256":"214580aecb06eabfdb6f274a265ff6b01c739322ccc4d99e80d4b177107ba1a3"},"schema_version":"1.0"},"canonical_sha256":"6b06bb6c1901453482ece12ef58a1bd98b086bcf14ca2c5ae88955d1fe0f27c7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:16:40.250019Z","signature_b64":"NpdJaY1WHgjetuiKi9a7HoVKR/V4l4OEaA77yKF6oWWjxxne+VpEcZXcd0XQb+8XyL+nyhunWjZGSQbkwcJEBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6b06bb6c1901453482ece12ef58a1bd98b086bcf14ca2c5ae88955d1fe0f27c7","last_reissued_at":"2026-07-05T11:16:40.249530Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:16:40.249530Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.04987","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7Fi7ODiqt2ZkJel+7RCxKY/8NSctpEqYCjA2jqJDPjyPTdfEfJ6VuXrnPEUBy4PDoLvecmgCO2BY/Wqpc15ECw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T20:43:02.146695Z"},"content_sha256":"4f94d23f798e529efe9670128ae695d45a45f8f416a1191eb66331e1fd1251df","schema_version":"1.0","event_id":"sha256:4f94d23f798e529efe9670128ae695d45a45f8f416a1191eb66331e1fd1251df"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:NMDLW3AZAFCTJAXM4EXPLCQ33G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Multi-Dataset Evaluation of Models for Automated Vulnerability Repair","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.SE","authors_text":"Aayush Garg, Qiang Tang, Zanis Ali Khan","submitted_at":"2025-06-05T13:00:19Z","abstract_excerpt":"Software vulnerabilities pose significant security threats, requiring effective mitigation. While Automated Program Repair (APR) has advanced in fixing general bugs, vulnerability patching, a security-critical aspect of APR remains underexplored. This study investigates pre-trained language models, CodeBERT and CodeT5, for automated vulnerability patching across six datasets and four languages. We evaluate their accuracy and generalization to unknown vulnerabilities. Results show that while both models face challenges with fragmented or sparse context, CodeBERT performs comparatively better in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.04987","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.04987/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/IlKoYmm4nIAn4gU7Ty9vdxiyQxg8EsaCeK8vb5LfTkCHwn4bv81gh1s57RGar25rtg0hip+PmK+n1lR4K/YCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T20:43:02.147713Z"},"content_sha256":"36caeafa51fe11c05fdd7f768a9d4443c2f6d2e5cef9f83acb930c28b104ffb0","schema_version":"1.0","event_id":"sha256:36caeafa51fe11c05fdd7f768a9d4443c2f6d2e5cef9f83acb930c28b104ffb0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G/bundle.json","state_url":"https://pith.science/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T20:43:02Z","links":{"resolver":"https://pith.science/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G","bundle":"https://pith.science/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G/bundle.json","state":"https://pith.science/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NMDLW3AZAFCTJAXM4EXPLCQ33G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:NMDLW3AZAFCTJAXM4EXPLCQ33G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"214580aecb06eabfdb6f274a265ff6b01c739322ccc4d99e80d4b177107ba1a3","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-06-05T13:00:19Z","title_canon_sha256":"66ab7c2c55e9317b90acba113b87253ab1202db8599f028ed3f9fbf11d5ce52e"},"schema_version":"1.0","source":{"id":"2506.04987","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.04987","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"arxiv_version","alias_value":"2506.04987v1","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.04987","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"pith_short_12","alias_value":"NMDLW3AZAFCT","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"pith_short_16","alias_value":"NMDLW3AZAFCTJAXM","created_at":"2026-07-05T11:16:40Z"},{"alias_kind":"pith_short_8","alias_value":"NMDLW3AZ","created_at":"2026-07-05T11:16:40Z"}],"graph_snapshots":[{"event_id":"sha256:36caeafa51fe11c05fdd7f768a9d4443c2f6d2e5cef9f83acb930c28b104ffb0","target":"graph","created_at":"2026-07-05T11:16:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.04987/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software vulnerabilities pose significant security threats, requiring effective mitigation. While Automated Program Repair (APR) has advanced in fixing general bugs, vulnerability patching, a security-critical aspect of APR remains underexplored. This study investigates pre-trained language models, CodeBERT and CodeT5, for automated vulnerability patching across six datasets and four languages. We evaluate their accuracy and generalization to unknown vulnerabilities. Results show that while both models face challenges with fragmented or sparse context, CodeBERT performs comparatively better in","authors_text":"Aayush Garg, Qiang Tang, Zanis Ali Khan","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-06-05T13:00:19Z","title":"A Multi-Dataset Evaluation of Models for Automated Vulnerability Repair"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.04987","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4f94d23f798e529efe9670128ae695d45a45f8f416a1191eb66331e1fd1251df","target":"record","created_at":"2026-07-05T11:16:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"214580aecb06eabfdb6f274a265ff6b01c739322ccc4d99e80d4b177107ba1a3","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-06-05T13:00:19Z","title_canon_sha256":"66ab7c2c55e9317b90acba113b87253ab1202db8599f028ed3f9fbf11d5ce52e"},"schema_version":"1.0","source":{"id":"2506.04987","kind":"arxiv","version":1}},"canonical_sha256":"6b06bb6c1901453482ece12ef58a1bd98b086bcf14ca2c5ae88955d1fe0f27c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6b06bb6c1901453482ece12ef58a1bd98b086bcf14ca2c5ae88955d1fe0f27c7","first_computed_at":"2026-07-05T11:16:40.249530Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:16:40.249530Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NpdJaY1WHgjetuiKi9a7HoVKR/V4l4OEaA77yKF6oWWjxxne+VpEcZXcd0XQb+8XyL+nyhunWjZGSQbkwcJEBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:16:40.250019Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.04987","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4f94d23f798e529efe9670128ae695d45a45f8f416a1191eb66331e1fd1251df","sha256:36caeafa51fe11c05fdd7f768a9d4443c2f6d2e5cef9f83acb930c28b104ffb0"],"state_sha256":"01c6bc5b88a4b4e82d53f78c2e9fb9873ba9b1c3b633187d7852060e4444c93e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4Raqxzcp1wbDpsjvO5jII46C9DUqHTVgo/98MYYdsLPVDekLKMYqp8SQf9lW416X+Sb/jtney288I1K0/7lEBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T20:43:02.158160Z","bundle_sha256":"1bb3b9f8c03bed4257ded3c0213ba4cf4663c5f69d65cbe5eab83c04c5c3fa09"}}