{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:SVFBQA5RBLBJMPWF7VEYD3F4JA","short_pith_number":"pith:SVFBQA5R","canonical_record":{"source":{"id":"2102.03131","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-05T12:15:06Z","cross_cats_sorted":[],"title_canon_sha256":"72171dcf205a5800b0860edec6c229ff9e435cae6363ccf9c419a0da6b55870e","abstract_canon_sha256":"f731cb0d2f1545dd5947bc6862c5af42febc535625ac97f00a7f669f5bf2f17b"},"schema_version":"1.0"},"canonical_sha256":"954a1803b10ac2963ec5fd4981ecbc4837cd740bbd50aad6c9a3c2521ed58c93","source":{"kind":"arxiv","id":"2102.03131","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.03131","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"arxiv_version","alias_value":"2102.03131v1","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.03131","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"pith_short_12","alias_value":"SVFBQA5RBLBJ","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"pith_short_16","alias_value":"SVFBQA5RBLBJMPWF","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"pith_short_8","alias_value":"SVFBQA5R","created_at":"2026-07-05T02:13:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:SVFBQA5RBLBJMPWF7VEYD3F4JA","target":"record","payload":{"canonical_record":{"source":{"id":"2102.03131","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-05T12:15:06Z","cross_cats_sorted":[],"title_canon_sha256":"72171dcf205a5800b0860edec6c229ff9e435cae6363ccf9c419a0da6b55870e","abstract_canon_sha256":"f731cb0d2f1545dd5947bc6862c5af42febc535625ac97f00a7f669f5bf2f17b"},"schema_version":"1.0"},"canonical_sha256":"954a1803b10ac2963ec5fd4981ecbc4837cd740bbd50aad6c9a3c2521ed58c93","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:13:06.157505Z","signature_b64":"eFbd+BczULm/cy3+hWU8tDugjbD5kCBWrjHuRPfHYqnTM1bmViZkxOBG9xoHvbkh+ZSMQg2Mxx5tsLZuEQUiBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"954a1803b10ac2963ec5fd4981ecbc4837cd740bbd50aad6c9a3c2521ed58c93","last_reissued_at":"2026-07-05T02:13:06.157090Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:13:06.157090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.03131","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:13:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zsQUzggIQyr2dtG6Q6bgRUW2E31vzieuTOclBk82WZWl13obu3RY8kDXaAK3T1XNLT29mrad8dXidFeDBOGZBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:21:20.901148Z"},"content_sha256":"f0e4f464065fe7b56db913950412bbd852f57a88f70cb6620f5b76344f892b5e","schema_version":"1.0","event_id":"sha256:f0e4f464065fe7b56db913950412bbd852f57a88f70cb6620f5b76344f892b5e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:SVFBQA5RBLBJMPWF7VEYD3F4JA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Christian Mainka, Juraj Somorovsky, Marcus Niemietz, Mario Korth","submitted_at":"2021-02-05T12:15:06Z","abstract_excerpt":"Nearly every second website is using a Content Management System (CMS) such as WordPress, Drupal, and Joomla. These systems help to create and modify digital data, typically within a collaborative environment. One common feature is to enrich their functionality by using extensions. Popular extensions allow developers to easily include payment gateways, backup tools, and social media components.\n  Due to the extended functionality, it is not surprising that such an expansion of complexity implies a bigger attack surface. In contrast to CMS core systems, extensions are usually not considered dur"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.03131","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.03131/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:13:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"90bRQRn9GWH5tRJK0GhqPlsMZST9GBKg2K2M9ly25IsmJS5xrwdGIrb7Ks4VqlyTLBrElUj3AQMT73fQKkLHAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:21:20.901693Z"},"content_sha256":"a7dc55fa46171f34b59a9633b2502fa9dfd9982ae705645926952ea7005d26ec","schema_version":"1.0","event_id":"sha256:a7dc55fa46171f34b59a9633b2502fa9dfd9982ae705645926952ea7005d26ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA/bundle.json","state_url":"https://pith.science/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T22:21:20Z","links":{"resolver":"https://pith.science/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA","bundle":"https://pith.science/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA/bundle.json","state":"https://pith.science/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SVFBQA5RBLBJMPWF7VEYD3F4JA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:SVFBQA5RBLBJMPWF7VEYD3F4JA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f731cb0d2f1545dd5947bc6862c5af42febc535625ac97f00a7f669f5bf2f17b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-05T12:15:06Z","title_canon_sha256":"72171dcf205a5800b0860edec6c229ff9e435cae6363ccf9c419a0da6b55870e"},"schema_version":"1.0","source":{"id":"2102.03131","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.03131","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"arxiv_version","alias_value":"2102.03131v1","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.03131","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"pith_short_12","alias_value":"SVFBQA5RBLBJ","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"pith_short_16","alias_value":"SVFBQA5RBLBJMPWF","created_at":"2026-07-05T02:13:06Z"},{"alias_kind":"pith_short_8","alias_value":"SVFBQA5R","created_at":"2026-07-05T02:13:06Z"}],"graph_snapshots":[{"event_id":"sha256:a7dc55fa46171f34b59a9633b2502fa9dfd9982ae705645926952ea7005d26ec","target":"graph","created_at":"2026-07-05T02:13:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.03131/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Nearly every second website is using a Content Management System (CMS) such as WordPress, Drupal, and Joomla. These systems help to create and modify digital data, typically within a collaborative environment. One common feature is to enrich their functionality by using extensions. Popular extensions allow developers to easily include payment gateways, backup tools, and social media components.\n  Due to the extended functionality, it is not surprising that such an expansion of complexity implies a bigger attack surface. In contrast to CMS core systems, extensions are usually not considered dur","authors_text":"Christian Mainka, Juraj Somorovsky, Marcus Niemietz, Mario Korth","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-05T12:15:06Z","title":"Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.03131","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f0e4f464065fe7b56db913950412bbd852f57a88f70cb6620f5b76344f892b5e","target":"record","created_at":"2026-07-05T02:13:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f731cb0d2f1545dd5947bc6862c5af42febc535625ac97f00a7f669f5bf2f17b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-05T12:15:06Z","title_canon_sha256":"72171dcf205a5800b0860edec6c229ff9e435cae6363ccf9c419a0da6b55870e"},"schema_version":"1.0","source":{"id":"2102.03131","kind":"arxiv","version":1}},"canonical_sha256":"954a1803b10ac2963ec5fd4981ecbc4837cd740bbd50aad6c9a3c2521ed58c93","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"954a1803b10ac2963ec5fd4981ecbc4837cd740bbd50aad6c9a3c2521ed58c93","first_computed_at":"2026-07-05T02:13:06.157090Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:13:06.157090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eFbd+BczULm/cy3+hWU8tDugjbD5kCBWrjHuRPfHYqnTM1bmViZkxOBG9xoHvbkh+ZSMQg2Mxx5tsLZuEQUiBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:13:06.157505Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.03131","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f0e4f464065fe7b56db913950412bbd852f57a88f70cb6620f5b76344f892b5e","sha256:a7dc55fa46171f34b59a9633b2502fa9dfd9982ae705645926952ea7005d26ec"],"state_sha256":"fa9129a6d4e6a2bdc5f589e805328205cdff53197643b5f73a6b466b7a087f21"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SWAeECIMU4WkLbqOyxyw6I4lTOios5H4eD/oH4AwFKZSQT7UyYZ1u71F9RW+E0uuqiJG0Sn07tEDbny6YfurAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T22:21:20.906318Z","bundle_sha256":"ed23b0ef2e25e7b7de801990e709ee61bd9f7761beed9cfece98f248c9b5bce9"}}