Source assertions are not new attribution claims. No sole inventor or transitive actor-CVE inference. { "record": { "id": "local-technique:format-string", "title": "Externally controlled format string", "type": "Historical concept", "snapshot": "historical-seed.json", "source_url": "https://seclists.org/bugtraq/1999/Sep/314", "description": "Untrusted text used as formatting control can expose or alter process memory.", "defensive_context": "Fixed trusted format strings and compiler/static data-flow diagnostics.", "publication": { "id": "local-publication:format-string-milestone", "entity_type": "Publication", "title": "proftpd1.2.0pre6patch", "source_url": "https://seclists.org/bugtraq/1999/Sep/314", "publication_date": "1999-09-17", "publisher": "Bugtraq", "credit_display": "Tymm Twillman", "credit_role": "specific vulnerability disclosure and patch author" }, "mappings": [ { "target_id": "CWE-134", "relation": "underlying weakness", "status": "research-supplied conceptual mapping; target exists in imported taxonomy; semantic review pending" } ], "uncertainty": "An early located disclosure, not a proven universal first. Newsham2000 and scut/teamteso2001 are separate later expositions.", "rights": "Original concise metadata and linked references; no full paper or payload imported", "review_status": "Editorial historical seed; conceptual mappings remain explicitly provisional" }, "assertions": [ ], "source_snapshot": null, "notices_url": "https://aol.pm/source-notices.txt", "notices": "Source-specific notices: https://aol.pm/source-notices.txt\nCVE terms: https://www.cve.org/Legal/TermsOfUse" } Source-specific notices: https://aol.pm/source-notices.txt CVE terms: https://www.cve.org/Legal/TermsOfUse