Pith. sign in

Paper Citation Record · LEDGER

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

As of 9 August 2026, this Paper Citation Record lists 80 of 80 outbound references and 1 inbound Pith citation observation for arXiv:2506.12995.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.12995 v1

Coverage vector

measured 80 of 80 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:41:18.741692Z

measured 81 of 81 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T00:31:17.975540Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T00:31:19.886341Z

Reference resolution

80 of 80 outbound references displayed

  • verified exact0
  • verified fuzzy75
  • unresolved4
  • parse uncertain1
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ae68133b-e5ea-45d2-bb5b-d712bacc2f99 · outbound

This paper cites As- apy: A python library for aerospace simulation analysis,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software As- apy: A python library for aerospace simulation analysis,

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.254582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:15.391419Z digest=sha256:e27864775f2440fab30cdf7f3b1f0aad4c8f4a80654f9700d8abe055e48e0305

Observation 43dcde1f-e298-42d1-9075-9dde4bb1adc0 · outbound

This paper cites A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.240263Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:15.478313Z digest=sha256:50c79251e713f254d80deefdf8caa8fd682939b8ffe97d42fff9dc94218f39b3

Observation d5e403b9-6522-4cb5-aed6-2b3b416ebbaa · outbound

This paper cites Formation control method based on artificial potential fields for aircraft flight simulation,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Formation control method based on artificial potential fields for aircraft flight simulation,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.225801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:15.613314Z digest=sha256:15d8c185f2d07871ab5e354138289a60cf87fbe835f8e9c900383536f9ba72b9

Observation 1027d3e8-c8d3-48e3-a4d4-c1e0fb7a86cb · outbound

This paper cites Open source soft- ware and global entrepreneurship,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source soft- ware and global entrepreneurship,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.210324Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:15.694678Z digest=sha256:b15c6751754f6497e23781693cab7af73b280bb466f72233d8fe5a1f84a3129b

Observation 976373d7-feb5-498d-b9e5-f5985fd785fd · outbound

This paper cites Fingpt: Open- source financial large language models,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Fingpt: Open- source financial large language models,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:15.817244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:15.817244Z digest=sha256:f5f1f8256e0a78b095c3307ae9e63143dcabaf57e8ed2daaed454b34144e6ac4

Observation 274a5120-5d37-47f9-a495-30c0483ea848 · outbound

This paper cites Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.195515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:15.932060Z digest=sha256:8e8eaf0f8774afe46e4a8dc193ddb9313cd50c614b45173062b39593ef725ebd

Observation df7cbab4-0dd6-4263-aec2-62d87431b68d · outbound

This paper cites Open source development: A double-edged sword,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open source development: A double-edged sword,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.180371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.036048Z digest=sha256:be7e5de54bc75d1cfd3a89480b2175d9e6e1c7793c6540e6de49379046a6ac8f

Observation 9fdfc375-7e45-48b3-9118-b47296ff5782 · outbound

This paper cites Impact of using open source software on cyberse- curity,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Impact of using open source software on cyberse- curity,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.166617Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.157152Z digest=sha256:1242047f999ad7c44f9f990577760499de0481d9e4bd8e22ae63ecbddf91ffe6

Observation c6973a6f-42bd-40c2-9f23-dd12c4a5724f · outbound

This paper cites 27 malicious pypi packages with info- stealing capabilities discovered,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 27 malicious pypi packages with info- stealing capabilities discovered,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.149657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.274147Z digest=sha256:c584483f069cd0aabdc139c775dfb5087a9c5e18c1b80d6274b7f629f60b29ab

Observation a9b0eb19-5827-4e9a-820e-b35cbc440795 · outbound

This paper cites The hidden economy of open source software,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The hidden economy of open source software,

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.134558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.367592Z digest=sha256:8cf167fe9d2a8b67839c1be44364693b237d703124799ccdd5f9996ec669c806

Observation a49cbc08-fea9-4f07-80ac-80ac3ab4a3b7 · outbound

This paper cites Dozens of npm packages caught attempting to deploy reverse shell,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dozens of npm packages caught attempting to deploy reverse shell,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.119693Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.482235Z digest=sha256:00c71b55c08e49063466cf0d45178e72834d33518ff6cad969888c5fb614aa38

Observation 737c72ec-5921-480a-aaf2-fee0dc79e823 · outbound

This paper cites Hundreds of malicious python packages found stealing sensitive data,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Hundreds of malicious python packages found stealing sensitive data,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.103553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.599845Z digest=sha256:21a50c7084cf4ca8f00d15857273be3b7e689e4b23b1a9eb697abeb0f45d9257

Observation 30f7f07b-caf3-499a-b451-24b3fb21d327 · outbound

This paper cites Securing open source software act.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Securing open source software act

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.088767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.738793Z digest=sha256:0c69ef0fe0a3383967cd4502fa9478e1c49cb936ba1cf0a2aba7afe6881678b9

Observation afcfe3a7-cbb8-4f34-b711-a172ef9ec48c · outbound

This paper cites Summary of the 2023 request for information on open source software security.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Summary of the 2023 request for information on open source software security

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.074844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.899241Z digest=sha256:64312c858da82c26d367b2e9552eaf4eedc24a08e5fa7732dc158402451fd4d1

Observation dcfea0ad-182c-4208-ae41-dca6b326ee85 · outbound

This paper cites Cisa open source software security roadmap.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Cisa open source software security roadmap

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.058420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:16.959603Z digest=sha256:8a44f053a69ab63ad83a0f06b6f2a3dec0f8e56bcfbb4ae6cc3f704c96915b1d

Observation 43e960de-537c-41b6-a1f3-fdd546ebc97e · outbound

This paper cites Top web development languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Top web development languages

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.041151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.094990Z digest=sha256:b7550bbc5626467d8aad8fd6cc9a2eafaaa405eb88ac8ff967ff813dd84840a6

Observation fe91b5eb-f2a1-42ec-9213-efe7d0c40ea4 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.025113Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.177631Z digest=sha256:a7377bedb3f32a8d7a5115bf9c99a3796e16e91a0a15225c7543c05eb3806183

Observation 47833b2c-748c-4e62-ac14-25736f0f99b1 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:20.009304Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.229547Z digest=sha256:aa7724009181ef6e3fd8b8d459ddbf9b756aa90c8a9083c3fa6c398a360e0907

Observation 46861d48-4678-43f6-8729-2932bbfa6e84 · outbound

This paper cites Best languages for web development.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Best languages for web development

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.994200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.282845Z digest=sha256:2dd0f86f52d965895faa70e3dd5edc8e0f16cec518abbb975d00560e7d5908ef

Observation ab98dd44-5c3a-4d9d-939d-441a5443116e · outbound

This paper cites Empirical analysis of security vulnerabilities in python packages,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Empirical analysis of security vulnerabilities in python packages,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.979876Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.322669Z digest=sha256:71d7a78257127718172a236f02eb8089b81ce66d608427981f5477b85f49913b

Observation 3c138664-fe12-4918-bf5b-2fcb1929325f · outbound

This paper cites Small world with high risks: A study of security threats in the npm ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Small world with high risks: A study of security threats in the npm ecosystem,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.964782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.365173Z digest=sha256:5615b20904d40b2f1f6d471fcea4d218af8966661f460ae9204f8f8100ab1f4e

Observation 6240d4cf-84af-4617-94e7-d08fbd221131 · outbound

This paper cites Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:17.469971Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:17.469971Z digest=sha256:ec1a295562b8344b26795eccf8cf11c606dac7cfc8030eff7d4712d2b0c30c8d

Observation 88f464a8-a85b-490d-9ae6-4fd1d136787f · outbound

This paper cites Do software security practices yield fewer vul- nerabilities?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Do software security practices yield fewer vul- nerabilities?,

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.950057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.591706Z digest=sha256:ce5265039b06ffb1e7f3292cfa4d9f16ec25a70d69a5986099ee9b9964597c75

Observation 4aa3aa75-94ea-4586-a50d-a95ad31e1379 · outbound

This paper cites An empirical comparison of dependency issues in oss packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency issues in oss packaging ecosystems,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.933844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.650349Z digest=sha256:163063a041d3bba8f965fad4696a6d082d64a806ec2b4f616132fb0ba60f5840

Observation effc3bd8-b6cc-43a0-835e-8f81cd3a3fb4 · outbound

This paper cites An empirical comparison of dependency network evolution in seven software packaging ecosystems,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical comparison of dependency network evolution in seven software packaging ecosystems,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.919148Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.725197Z digest=sha256:5058759f1bd75ac39659fbb08d063ae1ea3d6d2308f81440ff5a99284619442a

Observation ac7a2834-9612-4f8c-8d04-bdc76155363d · outbound

This paper cites Structure and evolution of package dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Structure and evolution of package dependency networks,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.904636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.844856Z digest=sha256:0eb49643b7ef09e22bbbf742073d234d9ddf93b7ef4f18db7c0f5ae192284b5c

Observation d78b4291-1340-4d26-b57c-fb578ea630e3 · outbound

This paper cites On the impact of se- curity vulnerabilities in the npm package dependency network,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of se- curity vulnerabilities in the npm package dependency network,

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.889080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.872690Z digest=sha256:1b7b6ea51885d68d8e2e82d373282dd45c619ecb6e1464d92ba9fe705a45f994

Observation f2c65bf3-3524-4af7-b76f-fa825ddb501c · outbound

This paper cites On the impact of security vulnerabilities in the npm and rubygems dependency networks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On the impact of security vulnerabilities in the npm and rubygems dependency networks,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.874507Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.877137Z digest=sha256:341124db7175a724d4c084533e95b9df96b6ec2d2837dc489f867a312acb40a7

Observation 8980cd96-0fb6-4e47-b513-50ea5d6bbff8 · outbound

This paper cites Vulnerable open source dependen- cies: Counting those that matter,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Vulnerable open source dependen- cies: Counting those that matter,

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.859695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.893228Z digest=sha256:93f883240190e25ffbd2029b2eddd0b6dd8be8cc04b979ac6ca5850423b45e75

Observation 3527b220-e0da-4787-bec3-7926dd5f7d3f · outbound

This paper cites Common vulnerabilities and exposures (cve).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common vulnerabilities and exposures (cve)

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.843838Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:17.973348Z digest=sha256:0debb3c81cd35ece489fab468aab0b6e9fd23b6de3fb08cd9535d88f871cd312

Observation 2e20f57f-5f2c-44b7-a9ba-5856b7c70060 · outbound

This paper cites Mitre corporation.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Mitre corporation

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.830194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.033048Z digest=sha256:bbfa7c4078c50c8ea05378378ae8d848fe68e30d058daad839b9a1f9dab9225e

Observation b320f51f-c304-42a8-8b7c-c5df9b80722a · outbound

This paper cites Common weakness enumeration (cwe).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Common weakness enumeration (cwe)

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.814428Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.097151Z digest=sha256:2b670ff18c4d3c82e7d33c1e4d90954a9c202deed49153c5a486b6b65d079538

Observation 1b014856-3bcf-442e-97f5-7e3e92b09764 · outbound

This paper cites National vulnerability database (nvd).

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software National vulnerability database (nvd)

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.799050Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.228485Z digest=sha256:bc277924ce1541e4dcf95295b9373828126f92c71f5f45f0cfcbd44a4aa030c5

Observation bffd80ae-84a7-41c1-94e5-966103df42b6 · outbound

This paper cites What are weak links in the npm supply chain?,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software What are weak links in the npm supply chain?,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.784096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.335827Z digest=sha256:cfd47c7d90013a7e0e70d08d4378ab31fb8c71e0eb14de007e00e4be3dc81bb6

Observation 2ae82ce8-f748-48ad-ab89-f397bce5bce6 · outbound

This paper cites github/advisory-database,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software github/advisory-database,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.769238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.410880Z digest=sha256:cbfc290221320648e73499ce941726adaba3f755cb3d69f0daa6f80d790860cf

Observation d1dc5f18-f1c9-4dc3-a4b0-f900b9cf6b12 · outbound

This paper cites Snyk vulnerability database.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Snyk vulnerability database

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.754364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.472896Z digest=sha256:85e694336ecfb5df5dab8696b28e13c34c571ee07421ec0f0e4a043daa6d7c39

Observation 5bc59b39-5fef-40ef-8e01-698213cccd15 · outbound

This paper cites Libraries.io - discover open source libraries.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Libraries.io - discover open source libraries

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.736896Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.507508Z digest=sha256:92fd82d22c437e92c5014091c801c14a679b432beee8b5d132af88eca0159624

Observation eb1f0467-7037-45ab-92e5-8ac7236d049f · outbound

This paper cites Build software better, together.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Build software better, together

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.720966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.522755Z digest=sha256:02e2619ba99aae3735e4d144cb6c9b2e36b7f93397bbb34c5926391d85f5f14d

Observation 4ae11505-3725-4faa-abf4-65357f71e16f · outbound

This paper cites Open Source Vulnerability format - Open Source Vulnerability schema,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Open Source Vulnerability format - Open Source Vulnerability schema,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.706420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.527494Z digest=sha256:1509176660668488c64fabd65be22d6dcc091584ab766090a8864913c242d1ef

Observation 22d4a959-6e5b-4c6c-b52e-ea9b513bfdf2 · outbound

This paper cites On measuring vulner- able javascript functions in the wild,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software On measuring vulner- able javascript functions in the wild,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.690884Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.531505Z digest=sha256:09cbe4dbaea118056af9dcd9e5ff2f36a830a3970c210ab709845cc428f7a2a9

Observation 7f3cd61e-829a-4387-8198-12e83aaa323f · outbound

This paper cites To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.675934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.535604Z digest=sha256:73286e7199a2ea1d70d800d8ddaeb6fecb1a09c1ebd34e04d47bf9555f6c9a01

Observation bd22e318-170c-424c-afe0-9e77cde90a0b · outbound

This paper cites Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.658690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.539935Z digest=sha256:3a61bee6879b833dd9ca603f66155c20f634986ae031e0b69c4ee615b15eceaa

Observation 2ac46f0c-9e02-4125-8e77-be517112cdfb · outbound

This paper cites Can Large Language Models Find And Fix Vulnerable Software?.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Can Large Language Models Find And Fix Vulnerable Software?

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:41:18.544516Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:41:18.544516Z digest=sha256:86ee13ca28e9648746a6609a6c3cb98eed918aedd7f2ed3e94bef8cd25a40fa3

Observation 818cc7be-1636-47c1-b833-763a2f2c67fd · outbound

This paper cites Wayback machine,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Wayback machine,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.640685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.549508Z digest=sha256:eb6b6c213b4979c6d45b64fa35d7d4d2379ea99cbacffbae576e10fda7c09cfc

Observation 9bbf87f5-0e75-48c3-b2d6-79275ef24df3 · outbound

This paper cites Log4shell: The vulnerability explained,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Log4shell: The vulnerability explained,

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.623664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.554762Z digest=sha256:78312ce07e08c475440f406a3faaaece23eccecd653fcd1041c3625632c63289

Observation 4f958e5b-28d2-448d-8cda-d275e8f68bcf · outbound

This paper cites US govt offers $10 mil- lion bounty for info on Clop ransomware.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software US govt offers $10 mil- lion bounty for info on Clop ransomware

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.605382Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.560330Z digest=sha256:b2a15df0c9193a2c7d459500de08f2a1628eecc1a50ffb3130809ec12bd65b1b

Observation 4d373fca-9e60-4013-bfa3-4d3b894b665e · outbound

This paper cites Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.587946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.565889Z digest=sha256:1e751e598b6a03f8b10dce9f91fe4400d06f5bbeee0c02381b0a7c046159a4c4

Observation a5e49f92-9df2-4a23-9e56-06d94861ae7c · outbound

This paper cites The SolarWinds Cyber-Attack: What You Need to Know.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The SolarWinds Cyber-Attack: What You Need to Know

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.569293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.571537Z digest=sha256:0d6c04aebb9887a759c0956c8668cea533ca54b99d18bb06c849eb1db5ad073d

Observation 3bb42e3c-23da-4bde-85af-be3f59a99dab · outbound

This paper cites Go modules reference.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go modules reference

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.551478Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.577357Z digest=sha256:3dcf18d411481aadf14339a7465af70b0e45b765663f00e1d952dccb635840b7

Observation 7bfbb399-eaf0-4c14-bb08-12734ab2f5db · outbound

This paper cites Go proxy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Go proxy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.535752Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.582923Z digest=sha256:899c71b4a6cbc1860891083281adc894aeda8175fde5e272dd5d75bae04a321d

Observation 7db59566-1e16-4fcf-a710-e4ce2e86333a · outbound

This paper cites Using theGO111MODULEeverywhere!.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Using theGO111MODULEeverywhere!

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.520383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.588752Z digest=sha256:7d875e5ee6f05f0ee9a5d651bda0353055cf3ae99793cfb8d1c95a6b1998f56a

Observation cbd118c2-f823-4dac-ac74-e26e55b8fdc8 · outbound

This paper cites I know what you imported last summer: A study of security threats in thepython ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software I know what you imported last summer: A study of security threats in thepython ecosystem,

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.503677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.594853Z digest=sha256:e19b33620dccd84af0862ca48a894ad08f75881f1ed54932fae3a0ee7440e10f

Observation cc9e079c-5451-42cc-bd30-93b5843442df · outbound

This paper cites An empirical study of malicious code in pypi ecosystem,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software An empirical study of malicious code in pypi ecosystem,

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.486592Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.600474Z digest=sha256:de6269d78de20b2cc9938ed11121b7b217697baf913b4e8fe76ae4138759d7f1

Observation cf8d7c1b-6b99-4586-a391-111db2112e78 · outbound

This paper cites Backstabber’s knife collection: A review of open source software supply chain attacks,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Backstabber’s knife collection: A review of open source software supply chain attacks,

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.469936Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.605869Z digest=sha256:a15426d3ea1041d61d1cd7a2c112dbaa16838069f5cefd28ba8a28c0802c8088

Observation fd3be95a-8ca8-4e0a-a258-636afb299d37 · outbound

This paper cites Dependency confusion: How i hacked into apple, microsoft and dozens of other companies.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Dependency confusion: How i hacked into apple, microsoft and dozens of other companies

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.454775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.611636Z digest=sha256:e3c16d30fcdfb20478c3ff1474312061702fdc534c3d07ab1035de250fec9643

Observation a8050465-59ea-486a-8f8f-c490a36bf1db · outbound

This paper cites npm dependency confusion attack targeting gxm refer- ence.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software npm dependency confusion attack targeting gxm refer- ence

Reference 56

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.438315Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.617257Z digest=sha256:19cc365d3e71e85e45917b9630bca8ef6c669e59b0a6a5ecc94d2d3dd3151d70

Observation 08c35435-1063-460f-9930-4e19a7621d63 · outbound

This paper cites SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.422985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.621862Z digest=sha256:d768efc27dcb0d97db21c7bf5cfceca4c1b275870c2ed8942fb4b21831da53d5

Observation b918144e-93c5-4af9-a617-2d1d9c50dc2a · outbound

This paper cites SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.407686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.627419Z digest=sha256:1f450d7fa9b99525721c7f32b8b4b77dbc597feab3bf7ab8ec9c25d7e355ccdc

Observation 6655a007-0d2c-4e18-8ab0-252f3f233988 · outbound

This paper cites SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.388479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.632208Z digest=sha256:d59cdac94edef3cd4816e86edca823fd927b1c960f02e12d36567df38ea1a207

Observation d609e2c2-40e1-472a-984e-692dabcdf8bc · outbound

This paper cites SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.370302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.637451Z digest=sha256:129e238bbd55cc4a41f1d462c0032ca2ac77d42fc4f6ecd55059cbc86926e7a6

Observation 460f554d-12f2-4b30-a58f-967521453e9d · outbound

This paper cites The family of safe golang libraries is growing,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software The family of safe golang libraries is growing,

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.353618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.641658Z digest=sha256:409a2e8af7a0b025cfcd2c1a596599f039568b289282e3d7ff1d25c1c3df6afa

Observation 6c340277-630c-483e-8fd4-c0a1ae15ad9f · outbound

This paper cites Introducing npm package provenance,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Introducing npm package provenance,

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.321296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.652926Z digest=sha256:f2312060c9d9d2c585d2d361cf6fc95dc5d489ebff092febbfba62e4cf235f7f

Observation f43ba960-d51d-4c9c-9c2f-2d46da608ec6 · outbound

This paper cites rc - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software rc - npm package,

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.307145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.658069Z digest=sha256:8ec2e7d19b672295dc81c15e5eeec8b2508c5e5a75633ac9d3ce36f1aa32b683

Observation 83df5e8f-6cd0-4bf1-91cb-2f31480d49f0 · outbound

This paper cites coa - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software coa - npm package,

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.290423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.663477Z digest=sha256:88f6fded60cc1632eb803c3b3e158488483051b4f643cc9eccaed988e85bb850

Observation 04a2446c-9b37-4314-8260-0a166bce569f · outbound

This paper cites ua-parser-js - npm package,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software ua-parser-js - npm package,

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.275173Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.668631Z digest=sha256:f2176c825fbd1a570254e2fdf4323b2dbc955030be341f9490671174031d900d

Observation 0d2f2250-1a1d-4c54-8964-4adfd96396c5 · outbound

This paper cites CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.258890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.673125Z digest=sha256:fef8f64dadf7bbd428a8b221e76b95fae6ac998219048d093141d72d300741e8

Observation 51c12b66-1093-46cf-9fb6-dcc75e9cb172 · outbound

This paper cites CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.242392Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.679392Z digest=sha256:4677fdaafb3949c7baeb0a6f73700412fe97bb38c4eaa12fbe5194829ab0e4a4

Observation 0b319214-79d8-4500-99f1-a6886b9b9115 · outbound

This paper cites CWE - CWE-94: Improper control of generation of code (’code injection’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-94: Improper control of generation of code (’code injection’),

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.224971Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.684025Z digest=sha256:96d91bc2e39d6672e71dc2304124eeba3d11f5bbf2820c2fb4546bda073c5efc

Observation 98f0c9b2-0988-486b-9f6e-46089db11c87 · outbound

This paper cites CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.207256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.688598Z digest=sha256:c4efd35347ea9c11227fb922951e095dd7ada10e6ce97e9da8d1ac6881c6ec89

Observation dfcc63f4-7ac3-4653-92e5-0c25dc8599ba · outbound

This paper cites CWE - CWE-122: Heap-based Buffer Overflow,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-122: Heap-based Buffer Overflow,

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.187726Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.693550Z digest=sha256:c5b5c029b9a9dbc6dae03312a5008671b90640b20819e67d6c75cf2132a5fb56

Observation 06281f84-9a0f-42fd-b97f-4b17d5cb156c · outbound

This paper cites CWE - CWE-416: Use After Free,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-416: Use After Free,

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.168465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.698744Z digest=sha256:e9633100d7aa7fef06174d3c15f683e7ef02d7e9afe0c4f4eef3925ee1224767

Observation 10f4620b-10d3-4565-a5a8-2b963af0bf8e · outbound

This paper cites CWE - CWE-787: Out-of-Bounds Write,.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-787: Out-of-Bounds Write,

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.150007Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.704072Z digest=sha256:401fb65bedb1a2f0aa6c7afff2344172aedd23d9cd18d9747db61550c1a63b23

Observation 716190b2-6695-442c-95e7-6479213f2e7c · outbound

This paper cites Range operator.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Range operator

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.131632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.709547Z digest=sha256:0194ea2d8d9d60fbf021cbcc17dc983adcca17d10998d5613bcb4d09a515f9e7

Observation cb387af2-a3bf-40be-9b7e-3e21bdc120b6 · outbound

This paper cites CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.112327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.715609Z digest=sha256:7dafb38cfc16b98e1de9838eed75f97f523a98ee19ac0bfb191d75100aaaff61

Observation d8061490-4e54-4446-8a82-9c5360954fe8 · outbound

This paper cites Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision

Reference 77

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.069894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.725559Z digest=sha256:fb051a16742d2226198e8bae4d7fadb490b47286ba82c8dbd7849fdfde956469

Observation 22160637-cf91-47b3-bada-4134ff7bac9d · outbound

This paper cites These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.051532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.730660Z digest=sha256:d88082654bbe672ff5c12d40f9bd88e0263ada13fb277f3bb7ffaee31421582a

Observation 78f0fbbc-bbdf-4e74-ad8a-ef5daf63de99 · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 79

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:41:19.030216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.736392Z digest=sha256:90d41712323b8feac648faea5301293cd1c323a1b81a8df0501d420dc59738da

Observation 16fe951f-63ff-4596-aacd-d74996544db0 · outbound

This paper cites 14 TABLE 4.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software 14 TABLE 4

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:18.934575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.741692Z digest=sha256:4f4242d013dd2a60c20941c090a00b75f30c3faf2389a69df078ad9fea6817a0

Observation 0c704d7b-8c49-4ca6-b4d7-457b83206b5b · outbound

This paper cites an unresolved cited work.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Unresolved cited work

Reference 2023

Resolution
parse uncertain
raw_fallback, observed 2026-08-07T00:41:19.337461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.647618Z digest=sha256:1f599702f8bc058cba4233915b8cbca3a7422dd61991c41756e1c13591c1294a

Observation 4e69e5be-a829-457a-9041-796efe152917 · outbound

This paper cites Appendix.

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software Appendix

Reference 2024

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:41:19.086835Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-07T00:41:18.720769Z digest=sha256:e85af2ccd4f6d58178767618e4e2397ffd0da71fb01f54a174a0be0a62cd840a

Pith citing papers

Observation 5b13c0ec-fa79-46e3-a1e0-51d50cbe5c89 · inbound

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images cites this paper.

Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images Open Source, Open Threats? Investigating Security Challenges in Open-Source Software

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-06T00:31:19.938494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T00:31:17.975540Z digest=sha256:831043074edca3b5ca14216b9663b62e900141f2de30c46d84fbac3e16a88882