{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:R3XMRUKHMLMJTUGON3PV4YMHTJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e7d333f8c483f9f018fe48d6bfc6ba26f75875be7b258e4c78108f12729ab452","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-09T09:16:45Z","title_canon_sha256":"c61a3236da62a905b46524c8e62d8dea7875548085298987ec708fec0117a33b"},"schema_version":"1.0","source":{"id":"2509.07540","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.07540","created_at":"2026-07-05T12:07:23Z"},{"alias_kind":"arxiv_version","alias_value":"2509.07540v1","created_at":"2026-07-05T12:07:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.07540","created_at":"2026-07-05T12:07:23Z"},{"alias_kind":"pith_short_12","alias_value":"R3XMRUKHMLMJ","created_at":"2026-07-05T12:07:23Z"},{"alias_kind":"pith_short_16","alias_value":"R3XMRUKHMLMJTUGO","created_at":"2026-07-05T12:07:23Z"},{"alias_kind":"pith_short_8","alias_value":"R3XMRUKH","created_at":"2026-07-05T12:07:23Z"}],"graph_snapshots":[{"event_id":"sha256:6d3ad75d7cfc71ae693be349f43e21973ad33dda359641d732f7911db92cc568","target":"graph","created_at":"2026-07-05T12:07:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.07540/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software vulnerabilities pose serious risks to modern software ecosystems. While the National Vulnerability Database (NVD) is the authoritative source for cataloging these vulnerabilities, it often lacks explicit links to the corresponding Vulnerability-Fixing Commits (VFCs). VFCs encode precise code changes, enabling vulnerability localization, patch analysis, and dataset construction. Automatically mapping NVD records to their true VFCs is therefore critical. Existing approaches have limitations as they rely on sparse, often noisy commit messages and fail to capture the deep semantics in the","authors_text":"Anh Tuan Nguyen, David Lo, Frank Liauw, Han Wei Ang, Huu Hung Nguyen, Ouh Eng Lieh, Shar Lwin Khin, Thanh Le-Cong, Ting Zhang, Yide Yin, Yikun Li","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-09T09:16:45Z","title":"PatchSeeker: Mapping NVD Records to their Vulnerability-fixing Commits with LLM Generated Commits and Embeddings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.07540","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1853aba4270fae9c230e4dbefe89386b6f45ae6d9b7ad2b8d482cd404b4fe8e0","target":"record","created_at":"2026-07-05T12:07:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e7d333f8c483f9f018fe48d6bfc6ba26f75875be7b258e4c78108f12729ab452","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-09T09:16:45Z","title_canon_sha256":"c61a3236da62a905b46524c8e62d8dea7875548085298987ec708fec0117a33b"},"schema_version":"1.0","source":{"id":"2509.07540","kind":"arxiv","version":1}},"canonical_sha256":"8eeec8d14762d899d0ce6edf5e61879a46d5228f107a74c930c88d4a99bb960f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8eeec8d14762d899d0ce6edf5e61879a46d5228f107a74c930c88d4a99bb960f","first_computed_at":"2026-07-05T12:07:23.588658Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:07:23.588658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sXf2o+BObauAy29hFZfkIUMumfNJ68j0qsFrBgOoLSPOlR2DiKYwi5R7wxh15bTdJbgcmmOwl9TLdN38iG1iDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:07:23.589173Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.07540","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1853aba4270fae9c230e4dbefe89386b6f45ae6d9b7ad2b8d482cd404b4fe8e0","sha256:6d3ad75d7cfc71ae693be349f43e21973ad33dda359641d732f7911db92cc568"],"state_sha256":"669a15ad5b22597a8ff4d8311f108a50760cd54ebc52c7244f4bbe160f345844"}