{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:QSS2AOC5GBO5IE6ERO63M4SW3P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e75e695d5482147bc9361f3466c9d6764de70ae04e63ab0c793b9c5d171f01fd","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T06:36:19Z","title_canon_sha256":"bde16551e5f485797a772c06ed219144909e8daf448a749190a3d16749e79611"},"schema_version":"1.0","source":{"id":"2112.10356","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.10356","created_at":"2026-07-05T03:48:48Z"},{"alias_kind":"arxiv_version","alias_value":"2112.10356v2","created_at":"2026-07-05T03:48:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.10356","created_at":"2026-07-05T03:48:48Z"},{"alias_kind":"pith_short_12","alias_value":"QSS2AOC5GBO5","created_at":"2026-07-05T03:48:48Z"},{"alias_kind":"pith_short_16","alias_value":"QSS2AOC5GBO5IE6E","created_at":"2026-07-05T03:48:48Z"},{"alias_kind":"pith_short_8","alias_value":"QSS2AOC5","created_at":"2026-07-05T03:48:48Z"}],"graph_snapshots":[{"event_id":"sha256:ce5f995223549427a75f22dee59d685d703d3691e273809cd3306cfa8eb16c6d","target":"graph","created_at":"2026-07-05T03:48:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.10356/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software Vulnerability (SV) severity assessment is a vital task for informing SV remediation and triage. Ranking of SV severity scores is often used to advise prioritization of patching efforts. However, severity assessment is a difficult and subjective manual task that relies on expertise, knowledge, and standardized reporting schemes. Consequently, different data sources that perform independent analysis may provide conflicting severity rankings. Inconsistency across these data sources affects the reliability of severity assessment data, and can consequently impact SV prioritization and fixi","authors_text":"Li Li, M. Ali Babar, Roland Croft","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T06:36:19Z","title":"An Investigation into Inconsistency of Software Vulnerability Severity across Data Sources"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.10356","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0284a3e4399d3c705709859fc35c296d8f75ac13da0a0963e693a7903175c3cf","target":"record","created_at":"2026-07-05T03:48:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e75e695d5482147bc9361f3466c9d6764de70ae04e63ab0c793b9c5d171f01fd","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T06:36:19Z","title_canon_sha256":"bde16551e5f485797a772c06ed219144909e8daf448a749190a3d16749e79611"},"schema_version":"1.0","source":{"id":"2112.10356","kind":"arxiv","version":2}},"canonical_sha256":"84a5a0385d305dd413c48bbdb67256dbd0025a4442b478b8e3a6cd7dffd8ad67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"84a5a0385d305dd413c48bbdb67256dbd0025a4442b478b8e3a6cd7dffd8ad67","first_computed_at":"2026-07-05T03:48:48.276406Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:48:48.276406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eiUQunJsi5mWVoH15uMKZ5t6rCIuL76NE16tP2ityqsQf+kvW+l7zDRutCq+KpGTO3I/vI7bcLcgtHDn8wsMBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:48:48.276778Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.10356","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0284a3e4399d3c705709859fc35c296d8f75ac13da0a0963e693a7903175c3cf","sha256:ce5f995223549427a75f22dee59d685d703d3691e273809cd3306cfa8eb16c6d"],"state_sha256":"b4194c36bf699d1c2708a3ac1093e92aaa572a2b2513f34600fa8953c9a0f803"}