Pith. sign in

Paper Citation Record · LEDGER

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

As of 10 August 2026, this Paper Citation Record lists 80 of 80 outbound references and 1 inbound Pith citation observation for arXiv:2506.12995.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.12995 v1

Coverage vector

measured 80 of 80 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:41:18.741692Z

measured 81 of 81 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T00:31:17.975540Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T00:31:19.886341Z

Reference resolution

80 of 80 outbound references displayed

  • verified exact0
  • verified fuzzy75
  • unresolved4
  • parse uncertain1
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ae68133b-e5ea-45d2-bb5b-d712bacc2f99 · outbound

This paper cites As- apy: A python library for aerospace simulation analysis,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software As- apy: A python library for aerospace simulation analysis,

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.254582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:15.391419Z digest=sha256:848f7be52ab885a12ebe1edb5613b808bec66c00212dabf02516631f47b3cda4

Observation 43dcde1f-e298-42d1-9075-9dde4bb1adc0 · outbound

This paper cites A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.240263Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:15.478313Z digest=sha256:3ede969c587185046a38c80002943c85f28d31d1a9c24b1cf41e5d363605483b

Observation d5e403b9-6522-4cb5-aed6-2b3b416ebbaa · outbound

This paper cites Formation control method based on artificial potential fields for aircraft flight simulation,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Formation control method based on artificial potential fields for aircraft flight simulation,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.225801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:15.613314Z digest=sha256:8907cdbb360174b0fb2912bcc9d4bb3c2d330d338a5b792d912048924ffae201

Observation 1027d3e8-c8d3-48e3-a4d4-c1e0fb7a86cb · outbound

This paper cites Open source soft- ware and global entrepreneurship,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source soft- ware and global entrepreneurship,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.210324Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:15.694678Z digest=sha256:f2413c32cfd7fcd5e6af088ee60fcb4c4a3085564e74bf30c34e815af6cffe02

Observation 976373d7-feb5-498d-b9e5-f5985fd785fd · outbound

This paper cites Fingpt: Open- source financial large language models,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Fingpt: Open- source financial large language models,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:15.817244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:15.817244Z digest=sha256:f5f1f8256e0a78b095c3307ae9e63143dcabaf57e8ed2daaed454b34144e6ac4

Observation 274a5120-5d37-47f9-a495-30c0483ea848 · outbound

This paper cites Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.195515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:15.932060Z digest=sha256:31791405da15b5d5931a3a31b4ab618a9bf0b9f170caf63236d0a85f6688e122

Observation df7cbab4-0dd6-4263-aec2-62d87431b68d · outbound

This paper cites Open source development: A double-edged sword,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source development: A double-edged sword,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.180371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.036048Z digest=sha256:3b11b9fb74fba4d3c5337b684ad1f21d6cc734e89422ec4e2b400f1f426b2b19

Observation 9fdfc375-7e45-48b3-9118-b47296ff5782 · outbound

This paper cites Impact of using open source software on cyberse- curity,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Impact of using open source software on cyberse- curity,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.166617Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.157152Z digest=sha256:7aa5fbb58dadf5b6c544c1f197590c1c4116d5ebfab6543b393d7576dcea2e96

Observation c6973a6f-42bd-40c2-9f23-dd12c4a5724f · outbound

This paper cites 27 malicious pypi packages with info- stealing capabilities discovered,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 27 malicious pypi packages with info- stealing capabilities discovered,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.149657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.274147Z digest=sha256:fba64f155acd68f8cb3e5b884a70a340070831d6979c123afeba56d2096a7f71

Observation a9b0eb19-5827-4e9a-820e-b35cbc440795 · outbound

This paper cites The hidden economy of open source software,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The hidden economy of open source software,

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.134558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.367592Z digest=sha256:33724e8bff0481ee0dd7af1d04d2ae8ac697af73f083f8b1f4852a504b79728e

Observation a49cbc08-fea9-4f07-80ac-80ac3ab4a3b7 · outbound

This paper cites Dozens of npm packages caught attempting to deploy reverse shell,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dozens of npm packages caught attempting to deploy reverse shell,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.119693Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.482235Z digest=sha256:aa9272adef2b9dffd3f9105ed1248e29ced5141cfaa87a9aa52e02277b38cfcf

Observation 737c72ec-5921-480a-aaf2-fee0dc79e823 · outbound

This paper cites Hundreds of malicious python packages found stealing sensitive data,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Hundreds of malicious python packages found stealing sensitive data,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.103553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.599845Z digest=sha256:fefde71ba397b5694e7e2a99303852c9206f835a682bcc19a6b9fbe7814cf44f

Observation 30f7f07b-caf3-499a-b451-24b3fb21d327 · outbound

This paper cites Securing open source software act.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Securing open source software act

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.088767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.738793Z digest=sha256:ba54ec1caa1aea06a865752d066d2a61509cf28194bdacc0fd621436866aec0d

Observation afcfe3a7-cbb8-4f34-b711-a172ef9ec48c · outbound

This paper cites Summary of the 2023 request for information on open source software security.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Summary of the 2023 request for information on open source software security

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.074844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.899241Z digest=sha256:bb39beb571915c2ff9bf3e0bd5241f1f66a289dc0abf13d8509767796ccc129f

Observation dcfea0ad-182c-4208-ae41-dca6b326ee85 · outbound

This paper cites Cisa open source software security roadmap.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Cisa open source software security roadmap

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.058420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:16.959603Z digest=sha256:3d626a73fd82bda76a5bb9a0f97ce45cee2f82b6143bde354b0ece24544b47cd

Observation 43e960de-537c-41b6-a1f3-fdd546ebc97e · outbound

This paper cites Top web development languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Top web development languages

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.041151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.094990Z digest=sha256:47baf1a176a81bb92d29fc3b46a49fc933753e307f7df82d29ca1fbc265b7c4f

Observation fe91b5eb-f2a1-42ec-9213-efe7d0c40ea4 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.025113Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.177631Z digest=sha256:7520c80322bf63dd4a77fc80ced7116dc7bc73435d52901e15044cd8c27362f6

Observation 47833b2c-748c-4e62-ac14-25736f0f99b1 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.009304Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.229547Z digest=sha256:2b373b04c3d4d5279e1cc8008e0cafd41fdc184fe35502982c919eb5f4d90343

Observation 46861d48-4678-43f6-8729-2932bbfa6e84 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.994200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.282845Z digest=sha256:55ef4a6ffb8ee3dc01c44488aa586bdaf99bb3f99b5dc7c9f369c7a6ccc97c2e

Observation ab98dd44-5c3a-4d9d-939d-441a5443116e · outbound

This paper cites Empirical analysis of security vulnerabilities in python packages,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Empirical analysis of security vulnerabilities in python packages,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.979876Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.322669Z digest=sha256:1477247b04f59d0b0d397cba6d2b91350b2fb4881359e7a1bd457c5f212cc077

Observation 3c138664-fe12-4918-bf5b-2fcb1929325f · outbound

This paper cites Small world with high risks: A study of security threats in the npm ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Small world with high risks: A study of security threats in the npm ecosystem,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.964782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.365173Z digest=sha256:6d830a8066df453f2d946675f3d6c44910b47f46bf0c247788bdc441c51c6a1e

Observation 6240d4cf-84af-4617-94e7-d08fbd221131 · outbound

This paper cites Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:17.469971Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:17.469971Z digest=sha256:ec1a295562b8344b26795eccf8cf11c606dac7cfc8030eff7d4712d2b0c30c8d

Observation 88f464a8-a85b-490d-9ae6-4fd1d136787f · outbound

This paper cites Do software security practices yield fewer vul- nerabilities?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Do software security practices yield fewer vul- nerabilities?,

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.950057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.591706Z digest=sha256:7935f7ba554455d3af9128b1620d76d2734b28fc0d94cd765fb63c4ef01823d8

Observation 4aa3aa75-94ea-4586-a50d-a95ad31e1379 · outbound

This paper cites An empirical comparison of dependency issues in oss packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency issues in oss packaging ecosystems,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.933844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.650349Z digest=sha256:74f3091feb3e5c0e2096cb5b131a5cf61732d17c66fc3c82b0c0b91c0f1acaed

Observation effc3bd8-b6cc-43a0-835e-8f81cd3a3fb4 · outbound

This paper cites An empirical comparison of dependency network evolution in seven software packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency network evolution in seven software packaging ecosystems,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.919148Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.725197Z digest=sha256:0c39795081e4992ee6b4851edcaa28655b46bf995ef4e40ae9035d5cd898b5c4

Observation ac7a2834-9612-4f8c-8d04-bdc76155363d · outbound

This paper cites Structure and evolution of package dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Structure and evolution of package dependency networks,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.904636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.844856Z digest=sha256:0a345aa9a851fa6e09ea91184583de3e3adc9141561304aec43ca91446b2678a

Observation d78b4291-1340-4d26-b57c-fb578ea630e3 · outbound

This paper cites On the impact of se- curity vulnerabilities in the npm package dependency network,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of se- curity vulnerabilities in the npm package dependency network,

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.889080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.872690Z digest=sha256:28dc26252399a54355fcbf29e823188372c826a949cfd346089d5f8c1168567a

Observation f2c65bf3-3524-4af7-b76f-fa825ddb501c · outbound

This paper cites On the impact of security vulnerabilities in the npm and rubygems dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of security vulnerabilities in the npm and rubygems dependency networks,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.874507Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.877137Z digest=sha256:a2ecf83611829b3d7c14287842098f0434d6f4c079eb4c054df48e28dc61bbbe

Observation 8980cd96-0fb6-4e47-b513-50ea5d6bbff8 · outbound

This paper cites Vulnerable open source dependen- cies: Counting those that matter,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Vulnerable open source dependen- cies: Counting those that matter,

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.859695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.893228Z digest=sha256:d2887f0f168e66fd993c6a5f693609d4570baf4b8a836d0112f5c7e482a63662

Observation 3527b220-e0da-4787-bec3-7926dd5f7d3f · outbound

This paper cites Common vulnerabilities and exposures (cve).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common vulnerabilities and exposures (cve)

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.843838Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:17.973348Z digest=sha256:9b52025e134b798fd962440cb741caab780b993998bcfb8312241c0ad75482da

Observation 2e20f57f-5f2c-44b7-a9ba-5856b7c70060 · outbound

This paper cites Mitre corporation.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Mitre corporation

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.830194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.033048Z digest=sha256:4bec501feac3215aa95b3db104ae96c8bc11ca00fcaf705f5bf48edcee335c91

Observation b320f51f-c304-42a8-8b7c-c5df9b80722a · outbound

This paper cites Common weakness enumeration (cwe).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common weakness enumeration (cwe)

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.814428Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.097151Z digest=sha256:0e1fd5b89ab11a2cc4a2bce413aa8daba8fe8d0fcc4b94fe5ebf2ba6e8aa6460

Observation 1b014856-3bcf-442e-97f5-7e3e92b09764 · outbound

This paper cites National vulnerability database (nvd).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software National vulnerability database (nvd)

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.799050Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.228485Z digest=sha256:6fee9c65c4553162b9eaad3a7776b1eeaaade052adade59a3b022ee7de7c63ec

Observation bffd80ae-84a7-41c1-94e5-966103df42b6 · outbound

This paper cites What are weak links in the npm supply chain?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software What are weak links in the npm supply chain?,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.784096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.335827Z digest=sha256:c1c71d5f76c737eed238df81a36ee76b8f0a3b7992ef609d62f5cc50adf86f03

Observation 2ae82ce8-f748-48ad-ab89-f397bce5bce6 · outbound

This paper cites github/advisory-database,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software github/advisory-database,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.769238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.410880Z digest=sha256:8d1a59749b2b7e6ccd07d93824370158ae2024fcf9f003633a851dffbdad3c4d

Observation d1dc5f18-f1c9-4dc3-a4b0-f900b9cf6b12 · outbound

This paper cites Snyk vulnerability database.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Snyk vulnerability database

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.754364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.472896Z digest=sha256:a0deaf4954680ca7e5c6f64530b45534051fa78e76b8e06ae9ab46f96782e89f

Observation 5bc59b39-5fef-40ef-8e01-698213cccd15 · outbound

This paper cites Libraries.io - discover open source libraries.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Libraries.io - discover open source libraries

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.736896Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.507508Z digest=sha256:4007617c65e4dc91416382323d79024abcc9f1e1b5215bcb9f48d43a5cb07fcc

Observation eb1f0467-7037-45ab-92e5-8ac7236d049f · outbound

This paper cites Build software better, together.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Build software better, together

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.720966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.522755Z digest=sha256:8c2281d0e3dbae273e6aec891266245db6f8cc8a5183d57a68d89eda083d379a

Observation 4ae11505-3725-4faa-abf4-65357f71e16f · outbound

This paper cites Open Source Vulnerability format - Open Source Vulnerability schema,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open Source Vulnerability format - Open Source Vulnerability schema,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.706420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.527494Z digest=sha256:a0895a737f48440c9f3cfc1b61d699fe6e9116647f60f9966d2238b8b31d0744

Observation 22d4a959-6e5b-4c6c-b52e-ea9b513bfdf2 · outbound

This paper cites On measuring vulner- able javascript functions in the wild,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On measuring vulner- able javascript functions in the wild,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.690884Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.531505Z digest=sha256:ef589d4890fbaed143ca350436a98ce8e0f58cecab71162acb2f93b2073d0a7b

Observation 7f3cd61e-829a-4387-8198-12e83aaa323f · outbound

This paper cites To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.675934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.535604Z digest=sha256:7423826286637f415b978d613843bf71624f8c3b8b17a319be3224b8005654ef

Observation bd22e318-170c-424c-afe0-9e77cde90a0b · outbound

This paper cites Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.658690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.539935Z digest=sha256:d609208ce9171e2e89f115051fc741faf71d066610a56134ebd8d37d437387a6

Observation 2ac46f0c-9e02-4125-8e77-be517112cdfb · outbound

This paper cites Can Large Language Models Find And Fix Vulnerable Software?.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Can Large Language Models Find And Fix Vulnerable Software?

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:18.544516Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:18.544516Z digest=sha256:b48f6fafdcb9ca055608381561f19c11813ac737f82e4f41076b404eca93ad99

Observation 818cc7be-1636-47c1-b833-763a2f2c67fd · outbound

This paper cites Wayback machine,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Wayback machine,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.640685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.549508Z digest=sha256:940bdaeabf8e97264ee8a3d4640e2127f47710a9d76373ce7460304250b69d7f

Observation 9bbf87f5-0e75-48c3-b2d6-79275ef24df3 · outbound

This paper cites Log4shell: The vulnerability explained,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Log4shell: The vulnerability explained,

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.623664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.554762Z digest=sha256:83c9357233f7bc5060c8a8adbfa1bd34030cf63202a2d7b11e08d9012501934c

Observation 4f958e5b-28d2-448d-8cda-d275e8f68bcf · outbound

This paper cites US govt offers $10 mil- lion bounty for info on Clop ransomware.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software US govt offers $10 mil- lion bounty for info on Clop ransomware

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.605382Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.560330Z digest=sha256:c7fa3b3c7581f8bd53448ebec6b9dcba9012523d39ac5285061fb89db9c7633e

Observation 4d373fca-9e60-4013-bfa3-4d3b894b665e · outbound

This paper cites Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.587946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.565889Z digest=sha256:6b9288eaefe58d1e021e62716153063dd76238d73d1bd9b4065d698108615f99

Observation a5e49f92-9df2-4a23-9e56-06d94861ae7c · outbound

This paper cites The SolarWinds Cyber-Attack: What You Need to Know.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The SolarWinds Cyber-Attack: What You Need to Know

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.569293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.571537Z digest=sha256:a0e2d8a0aa80b91ed7bb50d0614e870152f0da2ce76edc31f58a5d64090a7809

Observation 3bb42e3c-23da-4bde-85af-be3f59a99dab · outbound

This paper cites Go modules reference.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go modules reference

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.551478Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.577357Z digest=sha256:6243180d6e958f081ceaeb92937b2b982aa246d87b8a9da79b768c0a5e2961fc

Observation 7bfbb399-eaf0-4c14-bb08-12734ab2f5db · outbound

This paper cites Go proxy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go proxy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.535752Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.582923Z digest=sha256:cb307318b00f2338f61dea4f4355f592bf969ec70e0f03f8741b0b103c6c77a0

Observation 7db59566-1e16-4fcf-a710-e4ce2e86333a · outbound

This paper cites Using theGO111MODULEeverywhere!.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Using theGO111MODULEeverywhere!

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.520383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.588752Z digest=sha256:37c585e830450ff2bbc730bc30088f337a1c17db79aa867dea18bf8296abe837

Observation cbd118c2-f823-4dac-ac74-e26e55b8fdc8 · outbound

This paper cites I know what you imported last summer: A study of security threats in thepython ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software I know what you imported last summer: A study of security threats in thepython ecosystem,

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.503677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.594853Z digest=sha256:2f70a999f76a684003922b7a748bea851cc0265aba1bae06ea35b45963d3a65c

Observation cc9e079c-5451-42cc-bd30-93b5843442df · outbound

This paper cites An empirical study of malicious code in pypi ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical study of malicious code in pypi ecosystem,

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.486592Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.600474Z digest=sha256:181896034cafc2415c5968aab84ab9ba7577ae644b43b8ca837f8f4385e3fec8

Observation cf8d7c1b-6b99-4586-a391-111db2112e78 · outbound

This paper cites Backstabber’s knife collection: A review of open source software supply chain attacks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Backstabber’s knife collection: A review of open source software supply chain attacks,

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.469936Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.605869Z digest=sha256:20574b6c1f33a2b01a92fd38ece981deb31bf82aa74296f7c08adb455126220a

Observation fd3be95a-8ca8-4e0a-a258-636afb299d37 · outbound

This paper cites Dependency confusion: How i hacked into apple, microsoft and dozens of other companies.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dependency confusion: How i hacked into apple, microsoft and dozens of other companies

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.454775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.611636Z digest=sha256:c9c15144b7f530bd5d8bdab992b4be136249c90de35cf33e10280ef6965b1c07

Observation a8050465-59ea-486a-8f8f-c490a36bf1db · outbound

This paper cites npm dependency confusion attack targeting gxm refer- ence.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software npm dependency confusion attack targeting gxm refer- ence

Reference 56

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.438315Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.617257Z digest=sha256:65a1ea8cbccf6278e501ada72eed53291356a79eb9f292979526792841856b42

Observation 08c35435-1063-460f-9930-4e19a7621d63 · outbound

This paper cites SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.422985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.621862Z digest=sha256:658370bb1ed07561fbd41e411bda0bbbe847552df65de13537a2ec1070de91af

Observation b918144e-93c5-4af9-a617-2d1d9c50dc2a · outbound

This paper cites SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.407686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.627419Z digest=sha256:f96b39f7d1fd1c173d68f69798c0979d7a6bded73bb00fc73e7ac2351a7140c4

Observation 6655a007-0d2c-4e18-8ab0-252f3f233988 · outbound

This paper cites SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.388479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.632208Z digest=sha256:f2ba964505c011a5b6229e3c2eab6df80634257574ce03a6f0f0bab2aec2eaf3

Observation d609e2c2-40e1-472a-984e-692dabcdf8bc · outbound

This paper cites SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.370302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.637451Z digest=sha256:76c7be797e7ce78d40814a2652ab11a95ecfc5ea1441da2b1f755b53c67d94be

Observation 460f554d-12f2-4b30-a58f-967521453e9d · outbound

This paper cites The family of safe golang libraries is growing,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The family of safe golang libraries is growing,

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.353618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.641658Z digest=sha256:0533609fec762435aca3d442f33850b4c17bdad525aa15529fcb4218af98f612

Observation 6c340277-630c-483e-8fd4-c0a1ae15ad9f · outbound

This paper cites Introducing npm package provenance,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Introducing npm package provenance,

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.321296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.652926Z digest=sha256:0633c86411d33cd538765ab1120fe0ca8214a2047f7ebd46b97609bf5a7cc848

Observation f43ba960-d51d-4c9c-9c2f-2d46da608ec6 · outbound

This paper cites rc - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software rc - npm package,

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.307145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.658069Z digest=sha256:743023e4622ea60592169595ca4cf0d927a5cb364cef3c37c25f475661e833d3

Observation 83df5e8f-6cd0-4bf1-91cb-2f31480d49f0 · outbound

This paper cites coa - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software coa - npm package,

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.290423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.663477Z digest=sha256:33a0a60d51ec0936dd043e9600556112c566da8743d33866ce394aa58090b564

Observation 04a2446c-9b37-4314-8260-0a166bce569f · outbound

This paper cites ua-parser-js - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software ua-parser-js - npm package,

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.275173Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.668631Z digest=sha256:c38c4fad1547b1c0d41182d16146b044acc12f82426919b8d6c4e525d6714ba3

Observation 0d2f2250-1a1d-4c54-8964-4adfd96396c5 · outbound

This paper cites CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.258890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.673125Z digest=sha256:13c2d49139731d5d798823e74de0ec20b2023478be06f3a81c44b7502a3b8fe2

Observation 51c12b66-1093-46cf-9fb6-dcc75e9cb172 · outbound

This paper cites CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.242392Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.679392Z digest=sha256:e827593dfb2f84c2e2bef5814899a8a1daba98eee8fe338b3d32c0eab5433c95

Observation 0b319214-79d8-4500-99f1-a6886b9b9115 · outbound

This paper cites CWE - CWE-94: Improper control of generation of code (’code injection’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-94: Improper control of generation of code (’code injection’),

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.224971Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.684025Z digest=sha256:3dc23a1b57adffd50a6660873657cc55feeb27b3dac61955c72bb12ce7a463f3

Observation 98f0c9b2-0988-486b-9f6e-46089db11c87 · outbound

This paper cites CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.207256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.688598Z digest=sha256:d399d7c5b88b32c602d0a307009b96bdf0053623c9e64481307806286239fa3d

Observation dfcc63f4-7ac3-4653-92e5-0c25dc8599ba · outbound

This paper cites CWE - CWE-122: Heap-based Buffer Overflow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-122: Heap-based Buffer Overflow,

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.187726Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.693550Z digest=sha256:965e83410ba8a46b6b742c149f4307dcbcaf3a3541f5f1704e20562dc9cd020a

Observation 06281f84-9a0f-42fd-b97f-4b17d5cb156c · outbound

This paper cites CWE - CWE-416: Use After Free,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-416: Use After Free,

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.168465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.698744Z digest=sha256:156a22475c0a9128b0e626929ec3e665e9e7987c717b5c8cffd540809a356f28

Observation 10f4620b-10d3-4565-a5a8-2b963af0bf8e · outbound

This paper cites CWE - CWE-787: Out-of-Bounds Write,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-787: Out-of-Bounds Write,

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.150007Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.704072Z digest=sha256:af7217d08fc9e58b77fdb9b2cc41fdf94dbafd613dee7695b0265273d7295551

Observation 716190b2-6695-442c-95e7-6479213f2e7c · outbound

This paper cites Range operator.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Range operator

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.131632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.709547Z digest=sha256:d57bf4891186dbaf544647a5c09ba095cd7b03adfcb6dc2fdd76de42b09cd77b

Observation cb387af2-a3bf-40be-9b7e-3e21bdc120b6 · outbound

This paper cites CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.112327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.715609Z digest=sha256:5f050ed7e18068b980931046b5b6ab4ffcbe02014574534f8d1449001ade0b87

Observation d8061490-4e54-4446-8a82-9c5360954fe8 · outbound

This paper cites Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision

Reference 77

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.069894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.725559Z digest=sha256:831d7a5b8cb856e1a139615a32713b7683c39161424c51beed78226b4a271929

Observation 22160637-cf91-47b3-bada-4134ff7bac9d · outbound

This paper cites These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.051532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.730660Z digest=sha256:e9bb7379424b93d8bacf73fad8d859587dfb62b04fcd115ccb7b5ed143f4c227

Observation 78f0fbbc-bbdf-4e74-ad8a-ef5daf63de99 · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 79

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:41:19.030216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.736392Z digest=sha256:90687ee6551e59b08d2d46bb1a4f3347dfa79d047e762c4ce0c7dec94e540d26

Observation 16fe951f-63ff-4596-aacd-d74996544db0 · outbound

This paper cites 14 TABLE 4.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 14 TABLE 4

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:18.934575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.741692Z digest=sha256:dba1986f5c66e10a85c4259fc98797a3065d1d89266c1c4794af82dc14ae72c4

Observation 0c704d7b-8c49-4ca6-b4d7-457b83206b5b · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 2023

Resolution
parse uncertain
raw_fallback, observed 2026-08-07T00:41:19.337461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.647618Z digest=sha256:4238cdab79e73c0ff7025bd73ea2244089b66122d2236e1746417d5ed05f6be5

Observation 4e69e5be-a829-457a-9041-796efe152917 · outbound

This paper cites Appendix.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Appendix

Reference 2024

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.086835Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-07T00:41:18.720769Z digest=sha256:f5d063e3f57b64d57d0143d3ff65c47c8c6445c730c2d54fa74a0b35bd2a49dc

Pith citing papers

Observation 5b13c0ec-fa79-46e3-a1e0-51d50cbe5c89 · inbound

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images cites this paper.

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-06T00:31:19.938494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-06T00:31:17.975540Z digest=sha256:e5a7c21c327e2e6f83d6a54411de617ca33f9783a6b5f2602afa290b3f11d634