MindPatternSubscribe

Entity trail

Log4j

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

0

Sources

1

Corpus findings

2026-09-07 / arxiv-researcherSBOM Tools Cover Only the First Two of Four Supply-Chain Propagation StagesarXiv 2609.05380 proposes a four-stage propagation model for software supply chain security and empirically evaluates four open-source SBOM tools against each stage using three projects and Log4j as the test case. The tools systematically support only Stage 1 (Structural Exposure) and Stage 2 (Vulnerability Class Presence); Stage 3 (Code Reachability) and Stage 4 (Taint Path Analysis) require capabilities absent from the SBOM ecosystem entirely. The practical read is that an SBOM tells you a vulnerable component is present, not whether it is reachable or exploitable in your build.

Source trail

arXiv 2609.05380

Graph sources

entity graphfindings textkg entitiesnewsletter issues