{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NMKRIYLMSVTTHQONLHVUSH6DPP","short_pith_number":"pith:NMKRIYLM","canonical_record":{"source":{"id":"2412.15905","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T13:57:27Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"0b357303d0874ee99c0098a67434f17ec84d1adb715c895ecabf61b68a8b4811","abstract_canon_sha256":"bcf4afaf88d20e90a8e5a0dcee1e3bea5e7b880fb752f47884935d4b4d8404ce"},"schema_version":"1.0"},"canonical_sha256":"6b1514616c956733c1cd59eb491fc37bf9c3fbe631fd2619040d62b89b4b6bfd","source":{"kind":"arxiv","id":"2412.15905","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.15905","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"arxiv_version","alias_value":"2412.15905v2","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.15905","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"pith_short_12","alias_value":"NMKRIYLMSVTT","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"pith_short_16","alias_value":"NMKRIYLMSVTTHQON","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"pith_short_8","alias_value":"NMKRIYLM","created_at":"2026-07-05T09:53:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NMKRIYLMSVTTHQONLHVUSH6DPP","target":"record","payload":{"canonical_record":{"source":{"id":"2412.15905","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T13:57:27Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"0b357303d0874ee99c0098a67434f17ec84d1adb715c895ecabf61b68a8b4811","abstract_canon_sha256":"bcf4afaf88d20e90a8e5a0dcee1e3bea5e7b880fb752f47884935d4b4d8404ce"},"schema_version":"1.0"},"canonical_sha256":"6b1514616c956733c1cd59eb491fc37bf9c3fbe631fd2619040d62b89b4b6bfd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:53:09.824520Z","signature_b64":"Xr00WxMzgZPnualTlzN/IOXVfc0kOV+vUNfBqxaFY9tQUj7pxuUr+8AtmPINqoqePl3OWUBJ7OlRO1RFjHPnAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6b1514616c956733c1cd59eb491fc37bf9c3fbe631fd2619040d62b89b4b6bfd","last_reissued_at":"2026-07-05T09:53:09.824065Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:53:09.824065Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.15905","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jrhDDntRHhVNrLlXbUUG1U3HaWZNfkrEZfrv4aC7/TxoG21byZLizkEB1GV2rv7E++8M89Y5vo3dnQc1LN5LBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T07:32:44.432940Z"},"content_sha256":"b74b000a81db3dcf6dbc21aee4fb61990619d742df8f618baa74524566fa8261","schema_version":"1.0","event_id":"sha256:b74b000a81db3dcf6dbc21aee4fb61990619d742df8f618baa74524566fa8261"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NMKRIYLMSVTTHQONLHVUSH6DPP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Vulnerability Detection in Popular Programming Languages with Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Christian Gehrmann, Kevin Dahl\\'en, Syafiq Al Atiiq","submitted_at":"2024-12-20T13:57:27Z","abstract_excerpt":"Vulnerability detection is crucial for maintaining software security, and recent research has explored the use of Language Models (LMs) for this task. While LMs have shown promising results, their performance has been inconsistent across datasets, particularly when generalizing to unseen code. Moreover, most studies have focused on the C/C++ programming language, with limited attention given to other popular languages. This paper addresses this gap by investigating the effectiveness of LMs for vulnerability detection in JavaScript, Java, Python, PHP, and Go, in addition to C/C++ for comparison"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.15905","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.15905/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MCjLstXayAdhDSgt+HPH5lHJt/ZSSTNaapuNADjvQP+ppKvpeCD7H66BmWnHFXYCSLmwZqVFApubbJmXwrX5Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T07:32:44.433470Z"},"content_sha256":"256587803cfe51b069512ad919073f4c82ee0b46b44eec9d92ac15a96028df2e","schema_version":"1.0","event_id":"sha256:256587803cfe51b069512ad919073f4c82ee0b46b44eec9d92ac15a96028df2e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NMKRIYLMSVTTHQONLHVUSH6DPP/bundle.json","state_url":"https://pith.science/pith/NMKRIYLMSVTTHQONLHVUSH6DPP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NMKRIYLMSVTTHQONLHVUSH6DPP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T07:32:44Z","links":{"resolver":"https://pith.science/pith/NMKRIYLMSVTTHQONLHVUSH6DPP","bundle":"https://pith.science/pith/NMKRIYLMSVTTHQONLHVUSH6DPP/bundle.json","state":"https://pith.science/pith/NMKRIYLMSVTTHQONLHVUSH6DPP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NMKRIYLMSVTTHQONLHVUSH6DPP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NMKRIYLMSVTTHQONLHVUSH6DPP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bcf4afaf88d20e90a8e5a0dcee1e3bea5e7b880fb752f47884935d4b4d8404ce","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T13:57:27Z","title_canon_sha256":"0b357303d0874ee99c0098a67434f17ec84d1adb715c895ecabf61b68a8b4811"},"schema_version":"1.0","source":{"id":"2412.15905","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.15905","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"arxiv_version","alias_value":"2412.15905v2","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.15905","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"pith_short_12","alias_value":"NMKRIYLMSVTT","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"pith_short_16","alias_value":"NMKRIYLMSVTTHQON","created_at":"2026-07-05T09:53:09Z"},{"alias_kind":"pith_short_8","alias_value":"NMKRIYLM","created_at":"2026-07-05T09:53:09Z"}],"graph_snapshots":[{"event_id":"sha256:256587803cfe51b069512ad919073f4c82ee0b46b44eec9d92ac15a96028df2e","target":"graph","created_at":"2026-07-05T09:53:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.15905/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vulnerability detection is crucial for maintaining software security, and recent research has explored the use of Language Models (LMs) for this task. While LMs have shown promising results, their performance has been inconsistent across datasets, particularly when generalizing to unseen code. Moreover, most studies have focused on the C/C++ programming language, with limited attention given to other popular languages. This paper addresses this gap by investigating the effectiveness of LMs for vulnerability detection in JavaScript, Java, Python, PHP, and Go, in addition to C/C++ for comparison","authors_text":"Christian Gehrmann, Kevin Dahl\\'en, Syafiq Al Atiiq","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T13:57:27Z","title":"Vulnerability Detection in Popular Programming Languages with Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.15905","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b74b000a81db3dcf6dbc21aee4fb61990619d742df8f618baa74524566fa8261","target":"record","created_at":"2026-07-05T09:53:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bcf4afaf88d20e90a8e5a0dcee1e3bea5e7b880fb752f47884935d4b4d8404ce","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T13:57:27Z","title_canon_sha256":"0b357303d0874ee99c0098a67434f17ec84d1adb715c895ecabf61b68a8b4811"},"schema_version":"1.0","source":{"id":"2412.15905","kind":"arxiv","version":2}},"canonical_sha256":"6b1514616c956733c1cd59eb491fc37bf9c3fbe631fd2619040d62b89b4b6bfd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6b1514616c956733c1cd59eb491fc37bf9c3fbe631fd2619040d62b89b4b6bfd","first_computed_at":"2026-07-05T09:53:09.824065Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:53:09.824065Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Xr00WxMzgZPnualTlzN/IOXVfc0kOV+vUNfBqxaFY9tQUj7pxuUr+8AtmPINqoqePl3OWUBJ7OlRO1RFjHPnAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:53:09.824520Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.15905","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b74b000a81db3dcf6dbc21aee4fb61990619d742df8f618baa74524566fa8261","sha256:256587803cfe51b069512ad919073f4c82ee0b46b44eec9d92ac15a96028df2e"],"state_sha256":"d41eac1168bb57cca07f098090d709dd83f4d14ab344ce3205355bf74809bd41"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CuJ7EeVVilW4IspvaqhPRs804d71EisLBGUCv6BiVd7nc+jnPwbFsNkWsMGpHWx2vuYKxp3aHePwvUcPgva1Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T07:32:44.438056Z","bundle_sha256":"d00d1e0b6737c4f4722fea9737661e4528e1298b13b6ba8c2b25d3842f705369"}}