{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:W7TZLDCDCDWMCKGN5EDE6OHUAL","short_pith_number":"pith:W7TZLDCD","canonical_record":{"source":{"id":"2410.15631","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-10-21T04:27:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f53530d7883c6c24cc48b8ffd4d2898c5f0a288bec0f163b8db775e69e537d96","abstract_canon_sha256":"b14306a9f3566bfafd783874b9c8bf11eb35bfe250d2090d242533a4e88a117e"},"schema_version":"1.0"},"canonical_sha256":"b7e7958c4310ecc128cde9064f38f402f99e3f18752ab788df0e193d6f386adf","source":{"kind":"arxiv","id":"2410.15631","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.15631","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"arxiv_version","alias_value":"2410.15631v2","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.15631","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"pith_short_12","alias_value":"W7TZLDCDCDWM","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"pith_short_16","alias_value":"W7TZLDCDCDWMCKGN","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"pith_short_8","alias_value":"W7TZLDCD","created_at":"2026-07-05T11:04:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:W7TZLDCDCDWMCKGN5EDE6OHUAL","target":"record","payload":{"canonical_record":{"source":{"id":"2410.15631","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-10-21T04:27:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f53530d7883c6c24cc48b8ffd4d2898c5f0a288bec0f163b8db775e69e537d96","abstract_canon_sha256":"b14306a9f3566bfafd783874b9c8bf11eb35bfe250d2090d242533a4e88a117e"},"schema_version":"1.0"},"canonical_sha256":"b7e7958c4310ecc128cde9064f38f402f99e3f18752ab788df0e193d6f386adf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:40.793857Z","signature_b64":"0mSt2Tg56VEcjkw5aIWhk7vVl/1gtmIBpsGAFFP7bGgFYHAWY1g0fcI89CTfcfCf2pymedvkCyG45sm9GV0ZAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b7e7958c4310ecc128cde9064f38f402f99e3f18752ab788df0e193d6f386adf","last_reissued_at":"2026-07-05T11:04:40.793304Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:40.793304Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.15631","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zWZcQinHeW/N+E/zmxqPeOc/mL/v+BIMswPMM2xMY1hqXlfLRvND2I0YRmCiT8q9fzsx8BXvM08y7pPqcmzRDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:27:52.926284Z"},"content_sha256":"1274818209b5c3fead3f53fc9cddbeceea4d873dc41457a14d7c03da981518ef","schema_version":"1.0","event_id":"sha256:1274818209b5c3fead3f53fc9cddbeceea4d873dc41457a14d7c03da981518ef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:W7TZLDCDCDWMCKGN5EDE6OHUAL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Security of Language Models for Code: A Systematic Literature Review","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Baowen Xu, Chunrong Fang, Quanjun Zhang, Tingxu Han, Weisong Sun, Yang Liu, Yifei Ge, Yuchen Chen, Zhenpeng Chen, Zhenyu Chen","submitted_at":"2024-10-21T04:27:41Z","abstract_excerpt":"Language models for code (CodeLMs) have emerged as powerful tools for code-related tasks, outperforming traditional methods and standard machine learning approaches. However, these models are susceptible to security vulnerabilities, drawing increasing research attention from domains such as software engineering, artificial intelligence, and cybersecurity. Despite the growing body of research focused on the security of CodeLMs, a comprehensive survey in this area remains absent. To address this gap, we systematically review 67 relevant papers, organizing them based on attack and defense strateg"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.15631","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.15631/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TPQyMRL3NpRGhcAkGR4wl3+vNX2grFeZ0XVp0CvLKJ8DFu7gS1runMsTjKUaGjM0zjywhi2ewREyRO7fP8yCCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:27:52.927180Z"},"content_sha256":"fefa8017eb0128a60cf9e7883673806cfc9ccbf50a4d74c13787cd8c6cf1054e","schema_version":"1.0","event_id":"sha256:fefa8017eb0128a60cf9e7883673806cfc9ccbf50a4d74c13787cd8c6cf1054e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL/bundle.json","state_url":"https://pith.science/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:27:52Z","links":{"resolver":"https://pith.science/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL","bundle":"https://pith.science/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL/bundle.json","state":"https://pith.science/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W7TZLDCDCDWMCKGN5EDE6OHUAL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:W7TZLDCDCDWMCKGN5EDE6OHUAL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b14306a9f3566bfafd783874b9c8bf11eb35bfe250d2090d242533a4e88a117e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-10-21T04:27:41Z","title_canon_sha256":"f53530d7883c6c24cc48b8ffd4d2898c5f0a288bec0f163b8db775e69e537d96"},"schema_version":"1.0","source":{"id":"2410.15631","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.15631","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"arxiv_version","alias_value":"2410.15631v2","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.15631","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"pith_short_12","alias_value":"W7TZLDCDCDWM","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"pith_short_16","alias_value":"W7TZLDCDCDWMCKGN","created_at":"2026-07-05T11:04:40Z"},{"alias_kind":"pith_short_8","alias_value":"W7TZLDCD","created_at":"2026-07-05T11:04:40Z"}],"graph_snapshots":[{"event_id":"sha256:fefa8017eb0128a60cf9e7883673806cfc9ccbf50a4d74c13787cd8c6cf1054e","target":"graph","created_at":"2026-07-05T11:04:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.15631/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Language models for code (CodeLMs) have emerged as powerful tools for code-related tasks, outperforming traditional methods and standard machine learning approaches. However, these models are susceptible to security vulnerabilities, drawing increasing research attention from domains such as software engineering, artificial intelligence, and cybersecurity. Despite the growing body of research focused on the security of CodeLMs, a comprehensive survey in this area remains absent. To address this gap, we systematically review 67 relevant papers, organizing them based on attack and defense strateg","authors_text":"Baowen Xu, Chunrong Fang, Quanjun Zhang, Tingxu Han, Weisong Sun, Yang Liu, Yifei Ge, Yuchen Chen, Zhenpeng Chen, Zhenyu Chen","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-10-21T04:27:41Z","title":"Security of Language Models for Code: A Systematic Literature Review"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.15631","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1274818209b5c3fead3f53fc9cddbeceea4d873dc41457a14d7c03da981518ef","target":"record","created_at":"2026-07-05T11:04:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b14306a9f3566bfafd783874b9c8bf11eb35bfe250d2090d242533a4e88a117e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-10-21T04:27:41Z","title_canon_sha256":"f53530d7883c6c24cc48b8ffd4d2898c5f0a288bec0f163b8db775e69e537d96"},"schema_version":"1.0","source":{"id":"2410.15631","kind":"arxiv","version":2}},"canonical_sha256":"b7e7958c4310ecc128cde9064f38f402f99e3f18752ab788df0e193d6f386adf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b7e7958c4310ecc128cde9064f38f402f99e3f18752ab788df0e193d6f386adf","first_computed_at":"2026-07-05T11:04:40.793304Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:40.793304Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0mSt2Tg56VEcjkw5aIWhk7vVl/1gtmIBpsGAFFP7bGgFYHAWY1g0fcI89CTfcfCf2pymedvkCyG45sm9GV0ZAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:40.793857Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.15631","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1274818209b5c3fead3f53fc9cddbeceea4d873dc41457a14d7c03da981518ef","sha256:fefa8017eb0128a60cf9e7883673806cfc9ccbf50a4d74c13787cd8c6cf1054e"],"state_sha256":"da8eea7f08ea69e59c8047a47ae2557eb3395432927f8048aa9a4b5dc4c1c8f4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zHzX/BjeJMylAWl9SxeZNk9EUzeAHPwFD8lmF5uixO6gk4f8TZvYIRlEpWSuDgN1ooiaNvyNnT1eFEZICUZMDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:27:52.933407Z","bundle_sha256":"7001023e1d0ae23c94795eadb764d9d37575d1992ea8384db75e0b02b92d66fa"}}