{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XZSYZWGOJY6X35ZSWMSUE2Q674","short_pith_number":"pith:XZSYZWGO","canonical_record":{"source":{"id":"2406.16347","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T06:39:07Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"6c954f9c0e527cf7d4967580ebf222c9c8e9c8b38d0379aca07ca621f7ac8268","abstract_canon_sha256":"d9236993796dd56db42cd56306c750dd86c29f5917e210ac5cadc8e32b4c297e"},"schema_version":"1.0"},"canonical_sha256":"be658cd8ce4e3d7df732b325426a1eff33b19d80de694c5cb6ac672016491885","source":{"kind":"arxiv","id":"2406.16347","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.16347","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"arxiv_version","alias_value":"2406.16347v2","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.16347","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"pith_short_12","alias_value":"XZSYZWGOJY6X","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"pith_short_16","alias_value":"XZSYZWGOJY6X35ZS","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"pith_short_8","alias_value":"XZSYZWGO","created_at":"2026-07-05T09:10:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XZSYZWGOJY6X35ZSWMSUE2Q674","target":"record","payload":{"canonical_record":{"source":{"id":"2406.16347","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T06:39:07Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"6c954f9c0e527cf7d4967580ebf222c9c8e9c8b38d0379aca07ca621f7ac8268","abstract_canon_sha256":"d9236993796dd56db42cd56306c750dd86c29f5917e210ac5cadc8e32b4c297e"},"schema_version":"1.0"},"canonical_sha256":"be658cd8ce4e3d7df732b325426a1eff33b19d80de694c5cb6ac672016491885","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:10:48.552714Z","signature_b64":"jEnUfJwoFuXICszBDVeYgm7h6L7ku5ySemRnyK199T2M0Yak9WtbBjzoPQO995NHifoK4QABA8Xt46xiKzMiAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be658cd8ce4e3d7df732b325426a1eff33b19d80de694c5cb6ac672016491885","last_reissued_at":"2026-07-05T09:10:48.552234Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:10:48.552234Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.16347","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:10:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wa0RuSdHKz+TQtZafwbpKakb1dh+XZyYSxxvD/fcQpJm42R7w53PE71M7Kt6JLy6BN5quVFaR39QoUrgLC4sCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T01:04:02.928113Z"},"content_sha256":"7e4b7eec83ea3ba11896ff9bc4f9d962ca5ef34233f6d2b89ce290d7627c0eb0","schema_version":"1.0","event_id":"sha256:7e4b7eec83ea3ba11896ff9bc4f9d962ca5ef34233f6d2b89ce290d7627c0eb0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XZSYZWGOJY6X35ZSWMSUE2Q674","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VulZoo: A Comprehensive Vulnerability Intelligence Dataset","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Bonan Ruan, Jiahao Liu, Weibo Zhao, Zhenkai Liang","submitted_at":"2024-06-24T06:39:07Z","abstract_excerpt":"Software vulnerabilities pose critical security and risk concerns for many software systems. Many techniques have been proposed to effectively assess and prioritize these vulnerabilities before they cause serious consequences. To evaluate their performance, these solutions often craft their own experimental datasets from limited information sources, such as MITRE CVE and NVD, lacking a global overview of broad vulnerability intelligence. The repetitive data preparation process further complicates the verification and comparison of new solutions. To resolve this issue, in this paper, we propose"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.16347","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.16347/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:10:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/ydJFoawe7jtyqs+JSHK6lyjTlBynmizk4C2ApWNs3d0EAhaB2mpNR05S80FL+yMt70bidxkUMrX34BcTsFHAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T01:04:02.928684Z"},"content_sha256":"ee0de588f26b4b64304ad0f757ae87e6d3388a665f4daef3a0496346cf60f0d6","schema_version":"1.0","event_id":"sha256:ee0de588f26b4b64304ad0f757ae87e6d3388a665f4daef3a0496346cf60f0d6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XZSYZWGOJY6X35ZSWMSUE2Q674/bundle.json","state_url":"https://pith.science/pith/XZSYZWGOJY6X35ZSWMSUE2Q674/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XZSYZWGOJY6X35ZSWMSUE2Q674/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T01:04:02Z","links":{"resolver":"https://pith.science/pith/XZSYZWGOJY6X35ZSWMSUE2Q674","bundle":"https://pith.science/pith/XZSYZWGOJY6X35ZSWMSUE2Q674/bundle.json","state":"https://pith.science/pith/XZSYZWGOJY6X35ZSWMSUE2Q674/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XZSYZWGOJY6X35ZSWMSUE2Q674/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XZSYZWGOJY6X35ZSWMSUE2Q674","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9236993796dd56db42cd56306c750dd86c29f5917e210ac5cadc8e32b4c297e","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T06:39:07Z","title_canon_sha256":"6c954f9c0e527cf7d4967580ebf222c9c8e9c8b38d0379aca07ca621f7ac8268"},"schema_version":"1.0","source":{"id":"2406.16347","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.16347","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"arxiv_version","alias_value":"2406.16347v2","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.16347","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"pith_short_12","alias_value":"XZSYZWGOJY6X","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"pith_short_16","alias_value":"XZSYZWGOJY6X35ZS","created_at":"2026-07-05T09:10:48Z"},{"alias_kind":"pith_short_8","alias_value":"XZSYZWGO","created_at":"2026-07-05T09:10:48Z"}],"graph_snapshots":[{"event_id":"sha256:ee0de588f26b4b64304ad0f757ae87e6d3388a665f4daef3a0496346cf60f0d6","target":"graph","created_at":"2026-07-05T09:10:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.16347/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software vulnerabilities pose critical security and risk concerns for many software systems. Many techniques have been proposed to effectively assess and prioritize these vulnerabilities before they cause serious consequences. To evaluate their performance, these solutions often craft their own experimental datasets from limited information sources, such as MITRE CVE and NVD, lacking a global overview of broad vulnerability intelligence. The repetitive data preparation process further complicates the verification and comparison of new solutions. To resolve this issue, in this paper, we propose","authors_text":"Bonan Ruan, Jiahao Liu, Weibo Zhao, Zhenkai Liang","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T06:39:07Z","title":"VulZoo: A Comprehensive Vulnerability Intelligence Dataset"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.16347","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7e4b7eec83ea3ba11896ff9bc4f9d962ca5ef34233f6d2b89ce290d7627c0eb0","target":"record","created_at":"2026-07-05T09:10:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9236993796dd56db42cd56306c750dd86c29f5917e210ac5cadc8e32b4c297e","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T06:39:07Z","title_canon_sha256":"6c954f9c0e527cf7d4967580ebf222c9c8e9c8b38d0379aca07ca621f7ac8268"},"schema_version":"1.0","source":{"id":"2406.16347","kind":"arxiv","version":2}},"canonical_sha256":"be658cd8ce4e3d7df732b325426a1eff33b19d80de694c5cb6ac672016491885","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be658cd8ce4e3d7df732b325426a1eff33b19d80de694c5cb6ac672016491885","first_computed_at":"2026-07-05T09:10:48.552234Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:10:48.552234Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jEnUfJwoFuXICszBDVeYgm7h6L7ku5ySemRnyK199T2M0Yak9WtbBjzoPQO995NHifoK4QABA8Xt46xiKzMiAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:10:48.552714Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.16347","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7e4b7eec83ea3ba11896ff9bc4f9d962ca5ef34233f6d2b89ce290d7627c0eb0","sha256:ee0de588f26b4b64304ad0f757ae87e6d3388a665f4daef3a0496346cf60f0d6"],"state_sha256":"30f36ae89f3b6a2beb3b0c76453016f587ff9742be0f4ff124fae74850117ba3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ijYIcS+vKy24Hw/3h6DKQrhtnH/oEdj1uavXyIv1yv9k0WsHGoMzKmZhsuAGuCGdBAeBfRs2lB3VHeUWw0SCBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T01:04:02.938503Z","bundle_sha256":"a7eb91ed36184af57607181e0586ba79fb475077af60249c81b97dbd83ced88e"}}