{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SLFAEP5WHROX4MPL4HZFZZC7QL","short_pith_number":"pith:SLFAEP5W","canonical_record":{"source":{"id":"2403.18624","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-03-27T14:34:29Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"435a225d96be32f546fef27cdc7eca174defabfd8ecbede2f5f78a1e257519ed","abstract_canon_sha256":"90ba4de409cf8ab807f7048768583887043ca0d2631e2974ce135065af01002c"},"schema_version":"1.0"},"canonical_sha256":"92ca023fb63c5d7e31ebe1f25ce45f82e3c06cfbd893534a52fc45282f2f2087","source":{"kind":"arxiv","id":"2403.18624","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.18624","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"arxiv_version","alias_value":"2403.18624v2","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.18624","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"pith_short_12","alias_value":"SLFAEP5WHROX","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"pith_short_16","alias_value":"SLFAEP5WHROX4MPL","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"pith_short_8","alias_value":"SLFAEP5W","created_at":"2026-07-05T08:42:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SLFAEP5WHROX4MPL4HZFZZC7QL","target":"record","payload":{"canonical_record":{"source":{"id":"2403.18624","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-03-27T14:34:29Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"435a225d96be32f546fef27cdc7eca174defabfd8ecbede2f5f78a1e257519ed","abstract_canon_sha256":"90ba4de409cf8ab807f7048768583887043ca0d2631e2974ce135065af01002c"},"schema_version":"1.0"},"canonical_sha256":"92ca023fb63c5d7e31ebe1f25ce45f82e3c06cfbd893534a52fc45282f2f2087","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:42:03.242642Z","signature_b64":"SWqp0YIYNn0X5Iajj1PfL5OwtbGRJhX/HTREFneLh4nj0DHvgmbk4gq6HGjns9682egAAkdt3UpSiVJGISNwCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"92ca023fb63c5d7e31ebe1f25ce45f82e3c06cfbd893534a52fc45282f2f2087","last_reissued_at":"2026-07-05T08:42:03.242180Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:42:03.242180Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.18624","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:42:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6Wj67zV17yhh3T9brhCv84iyoUwNotu6/4TFYz1UpB3rKPWe1K4LsXT58iBlBdA5IhvnNlbK3aKeMry/qRbrCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T16:41:25.170988Z"},"content_sha256":"35eb373e9303429dfac772e7b68fd0e81c0f82ad6045ce0c5c053440417be2ae","schema_version":"1.0","event_id":"sha256:35eb373e9303429dfac772e7b68fd0e81c0f82ad6045ce0c5c053440417be2ae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SLFAEP5WHROX4MPL4HZFZZC7QL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Vulnerability Detection with Code Language Models: How Far Are We?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.SE","authors_text":"Baishakhi Ray, Basel Alomair, Chawin Sitawarin, David Wagner, Omniyyah Ibrahim, Xinyun Chen, Yangruibo Ding, Yanjun Fu, Yizheng Chen","submitted_at":"2024-03-27T14:34:29Z","abstract_excerpt":"In the context of the rising interest in code language models (code LMs) and vulnerability detection, we study the effectiveness of code LMs for detecting vulnerabilities. Our analysis reveals significant shortcomings in existing vulnerability datasets, including poor data quality, low label accuracy, and high duplication rates, leading to unreliable model performance in realistic vulnerability detection scenarios. Additionally, the evaluation methods used with these datasets are not representative of real-world vulnerability detection.\n  To address these challenges, we introduce PrimeVul, a n"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.18624","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.18624/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:42:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A7lGMqQOvhWvMAUvy9Ihz0edF/yxoFKhOuUq2YmH0+xXoOkpZ6SiGe3G9FsiIpqDYR8UxeePb9t/xxV/NZpLCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T16:41:25.171374Z"},"content_sha256":"88977081013cbd82613c367458321be84b9dab2a3ab8c369cc53ab0b76479782","schema_version":"1.0","event_id":"sha256:88977081013cbd82613c367458321be84b9dab2a3ab8c369cc53ab0b76479782"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SLFAEP5WHROX4MPL4HZFZZC7QL/bundle.json","state_url":"https://pith.science/pith/SLFAEP5WHROX4MPL4HZFZZC7QL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SLFAEP5WHROX4MPL4HZFZZC7QL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T16:41:25Z","links":{"resolver":"https://pith.science/pith/SLFAEP5WHROX4MPL4HZFZZC7QL","bundle":"https://pith.science/pith/SLFAEP5WHROX4MPL4HZFZZC7QL/bundle.json","state":"https://pith.science/pith/SLFAEP5WHROX4MPL4HZFZZC7QL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SLFAEP5WHROX4MPL4HZFZZC7QL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SLFAEP5WHROX4MPL4HZFZZC7QL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"90ba4de409cf8ab807f7048768583887043ca0d2631e2974ce135065af01002c","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-03-27T14:34:29Z","title_canon_sha256":"435a225d96be32f546fef27cdc7eca174defabfd8ecbede2f5f78a1e257519ed"},"schema_version":"1.0","source":{"id":"2403.18624","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.18624","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"arxiv_version","alias_value":"2403.18624v2","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.18624","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"pith_short_12","alias_value":"SLFAEP5WHROX","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"pith_short_16","alias_value":"SLFAEP5WHROX4MPL","created_at":"2026-07-05T08:42:03Z"},{"alias_kind":"pith_short_8","alias_value":"SLFAEP5W","created_at":"2026-07-05T08:42:03Z"}],"graph_snapshots":[{"event_id":"sha256:88977081013cbd82613c367458321be84b9dab2a3ab8c369cc53ab0b76479782","target":"graph","created_at":"2026-07-05T08:42:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.18624/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the context of the rising interest in code language models (code LMs) and vulnerability detection, we study the effectiveness of code LMs for detecting vulnerabilities. Our analysis reveals significant shortcomings in existing vulnerability datasets, including poor data quality, low label accuracy, and high duplication rates, leading to unreliable model performance in realistic vulnerability detection scenarios. Additionally, the evaluation methods used with these datasets are not representative of real-world vulnerability detection.\n  To address these challenges, we introduce PrimeVul, a n","authors_text":"Baishakhi Ray, Basel Alomair, Chawin Sitawarin, David Wagner, Omniyyah Ibrahim, Xinyun Chen, Yangruibo Ding, Yanjun Fu, Yizheng Chen","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-03-27T14:34:29Z","title":"Vulnerability Detection with Code Language Models: How Far Are We?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.18624","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:35eb373e9303429dfac772e7b68fd0e81c0f82ad6045ce0c5c053440417be2ae","target":"record","created_at":"2026-07-05T08:42:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"90ba4de409cf8ab807f7048768583887043ca0d2631e2974ce135065af01002c","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-03-27T14:34:29Z","title_canon_sha256":"435a225d96be32f546fef27cdc7eca174defabfd8ecbede2f5f78a1e257519ed"},"schema_version":"1.0","source":{"id":"2403.18624","kind":"arxiv","version":2}},"canonical_sha256":"92ca023fb63c5d7e31ebe1f25ce45f82e3c06cfbd893534a52fc45282f2f2087","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"92ca023fb63c5d7e31ebe1f25ce45f82e3c06cfbd893534a52fc45282f2f2087","first_computed_at":"2026-07-05T08:42:03.242180Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:42:03.242180Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SWqp0YIYNn0X5Iajj1PfL5OwtbGRJhX/HTREFneLh4nj0DHvgmbk4gq6HGjns9682egAAkdt3UpSiVJGISNwCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:42:03.242642Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.18624","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:35eb373e9303429dfac772e7b68fd0e81c0f82ad6045ce0c5c053440417be2ae","sha256:88977081013cbd82613c367458321be84b9dab2a3ab8c369cc53ab0b76479782"],"state_sha256":"09669df4acaf5a1660e187a39c80cbfc68817caf8e1b40e31ddb988fe2fc652e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GFlFepvbXpViDzACWKtBpTiPmPvm2TwAmhGGesyv7kBTOZbS38H6yupistDVV5kP15UkwHrHYAAjZYnxWQilAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T16:41:25.173358Z","bundle_sha256":"7213df24f3238e1766b7595d2e3ad9720c33f9147d0c8a634a7ff309ea9c242d"}}