hs-esslingen-it-security/Awesome-LLM4SVD

[TOSEM'26] Awesome-LLM4SVD from "A Systematic Literature Review on Detecting Software Vulnerabilities with Large Language Models"

Jupyter Notebook

9 commits

updated Oct 1, 2026

See the code

README

Awesome-LLM4SVD 🌟🧠👩‍💻🔍

A Systematic Literature Review on Detecting Software Vulnerabilities with Large Language Models

Sabrina Kaniewski¹ · Fabian Schmidt¹ · Markus Enzweiler¹ · Michael Menth² · Tobias Heer¹

¹ Esslingen University of Applied Sciences · ² University of Tübingen

This repository contains the artifacts from our systematic literature review (SLR) on LLM-based software vulnerability detection. The SLR analyzes 263 studies published between January 2020 and November 2025, providing a structured taxonomy of detection approaches, input representations, system architectures, techniques, and dataset usage.

📢 News

[04, 2026]: The SLR has been accepted to ACM Transactions on Software Engineering and Methodology (TOSEM)! Read the manuscript here: https://doi.org/10.1145/3815425

📚 Resources & Table of Contents

To support open science and reproducibility, we publicly release the following artifacts:

📝 Surveyed Papers: A curated, continuously updated list of LLM4SVD papers.
🗂️ Taxonomy: Our comprehensive taxonomy of LLM-based vulnerability detection studies, along with the categorization of each surveyed and later added paper.
📈 Analyses: The analyses from the SLR.
📊 Selected Datasets: A list of the most commonly used datasets in the surveyed studies, complete with their download sources.

📖 Citation

For details on our methodology and findings, please see our manuscript. If you find this work helpful, please consider citing:

@article{kaniewskiLLM4SVD2026,
    author = {Kaniewski, Sabrina and Schmidt, Fabian and Enzweiler, Markus and Menth, Michael and Heer, Tobias},
    title = {A Systematic Literature Review on Detecting Software Vulnerabilities with Large Language Models},
    year = {2026},
    doi = {10.1145/3815425},
    note = {Just Accepted},
    journal = {ACM Transactions on Software Engineering and Methodology (TOSEM)}
}

🤝 Contribute to this repository
⚖️ License

Papers

Note: Entries marked with ✨ indicate the latest papers that are not discussed in the final version of the SLR. The SLR covers all studies up to November 2025.

2026

✨ (09/2026) Towards Behavior Tree-Guided Vulnerability Detection with Lightweight LLMs. arXiv 2026 [Paper]
✨ (08/2026) CLEAR: Causal Context-Based Agentic Reasoning for Vulnerability Detection. arXiv 2026 [Paper]
✨ (07/2026) Graph Is the Verifier: Agentic Reinforcement Learning for Interprocedural Vulnerability Detection. arXiv 2026 [Paper]
✨ (07/2026) DREA: Decoupled Reasoning and Exploration Agents for Repository-Level Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (06/2026) Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (06/2026) Representation Matters: An Empirical Study of Program Representations for LLM Vulnerability Reasoning. arXiv 2026 [Paper] [Code]
✨ (06/2026) Calibration Without Comprehension: Diagnosing the Limits of Fine-Tuning LLMs for Vulnerability Detection in Systems Software. arXiv 2026 [Paper]
✨ (06/2026) SCOUT: LLM-Driven Vulnerability Detection via Interactive Repository Exploration. IEEE Access 2026 [Paper] [Code]
✨ (05/2026) Prompting Matters: Evaluating Strategies for LLM-based Vulnerability Detection. ISCTIS 2026 [Paper]
✨ (05/2026) Dissecting the Black Box: Circuit-Level Analysis of LLM Vulnerability Detection. arXiv 2026 [Paper] [[Code](https://anonymous.4open.science/r/LLMvul- 02E6/)]
✨ (05/2026) VulKnow: Enhancing Vulnerability Detection with Structured Knowledge and Large Language Models. IEEE Internet of Things Journal 2026 [Paper]
✨ (05/2026) PromptAudit: Auditing Prompt Sensitivity in LLM-Based Vulnerability Detection. arXiv 2026 [Paper]
✨ (05/2026) Three Heads Are Better Than One: A Multi-perspective Reasoning Framework for Enhanced Vulnerability Detection. arXiv 2026 [Paper]
✨ (05/2026) VulTriage: Triple-Path Context Augmentation for LLM-Based Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (05/2026) From SFT to RL: Demystifying the Post-Training Pipeline for LLM-based Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (04/2026) VulStyle: A Multi-Modal Pre-Training for Code Stylometry-Augmented Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (04/2026) Learning Generalizable Multimodal Representations for Software Vulnerability Detection. arXiv 2026 [Paper]
✨ (04/2026) Strategic Heterogeneous Multi-Agent Architecture for Cost-Effective Code Vulnerability Detection. arXiv 2026 [Paper]
✨ (04/2026) SAGE: Signal-Amplified Guided Embeddings for LLM-based Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (04/2026) VulWeaver: Weaving Broken Semantics for Grounded Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (04/2026) Vulnerability Detection with Interprocedural Context in Multiple Languages: Assessing Effectiveness and Cost of Modern LLMs. arXiv 2026 [Paper] [Code]
✨ (03/2026) Evaluating Retrieval-Augmented Generation for LLM-Based Vulnerability Detection: An Empirical Study on Real-World Java Vulnerabilities. IEEE Access 2026 [Paper]
✨ (03/2026) CTX-Coder: Cross-Attention Architectures Empower LLMs for Long-Context Vulnerability Detection. AAAI 2026 [Paper] [Code]
✨ (02/2026) Leveraging Transformers to Discover Software Vulnerabilities based on Source Code Slices. AISC 2026 [Paper]
✨ (02/2026) Enhancing Continual Learning for Software Vulnerability Prediction: Addressing Catastrophic Forgetting via Hybrid-Confidence-Aware Selective Replay for Temporal LLM Fine-Tuning. arXiv 2026 [Paper]
✨ (02/2026) From SFT to RL: Demystifying the Post-Training Pipeline for LLM-based Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (02/2026) SecCodePRM: A Process Reward Model for Code Security. arXiv 2026 [Paper] [Code]
✨ (02/2026) VulReaD: Knowledge-Graph-guided Software Vulnerability Reasoning and Detection. arXiv 2026 [Paper] [Code]
✨ (02/2026) Beyond Function-Level Analysis: Context-Aware Reasoning for Inter-Procedural Vulnerability Detection. arXiv 2026 [Paper] [Code]
✨ (02/2026) Evaluating and Enhancing the Vulnerability Reasoning Capabilities of Large Language Models. arXiv 2026 [Paper]
✨ (02/2026) One Model, Many Skills: Parameter-Efficient Fine-Tuning for Multitask Code Analysis. arXiv 2026 [Paper] [Code]
✨ (01/2026) Retrieval-Augmented Semantic Mapping for Vulnerability Detection via Multi-View Code Similarity. Electronics 2026 [Paper]
✨ (01/2026) RLV: LLM-based Vulnerability Detection by Retrieving and Refining Contextual Information. Journal of Systems and Software 2026 [Paper] [Code]
✨ (01/2026) RAG-Enhanced Multi-Model Ensemble for Automated Vulnerability Detection Using SLMs. ICECTE 2026 [Paper] [Code]
✨ (01/2026) LLMs in Code Vulnerability Analysis: A Proof of Concept. arXiv 2026 [Paper] [Code]
✨ (01/2026) MulVul: Retrieval-augmented Multi-Agent Code Vulnerability Detection via Cross-Model Prompt Evolution. arXiv 2026 [Paper]
✨ (01/2026) LLM-based Vulnerability Detection at Project Scale: An Empirical Study. arXiv 2026 [Paper] [Code]
✨ (01/2026) The Semantic Trap: Do Fine-tuned LLMs Learn Vulnerability Root Cause or Just Functional Pattern?. arXiv 2026 [Paper] [Code]

2025

✨ (12/2025) ResVul-LLM: A Neurosymbolic Framework Combining Large Language Models and Symbolic Reasoning for C/C++ Vulnerability Analysis. BigData 2025 [Paper]
✨ (12/2025) CodeVul+: A Structure-Aware Framework for Cross-Repository Vulnerability Detection. BigData 2025 [Paper]
✨ (12/2025) Trust-Calibrated Multi-Stage Large Language Model Pipeline for Vulnerability Assessment in DevSecOps Workflows. ACSAC 2025 [Paper]
✨ (12/2025) Large Language Models Cannot Reliably Detect Vulnerabilities in JavaScript: The First Systematic Benchmark and Evaluation. arXiv 2025 [Paper] [Code] [Code]
✨ (12/2025) The Impact of Prompt Language and Representation on LLM Reasoning: A Multilingual Empirical Study. IEEE Access 2025 [Paper]
✨ (12/2025) A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detection. arXiv 2025 [Paper] [Code]
✨ (12/2025) From Lab to Reality: A Practical Evaluation of Deep Learning Models and LLMs for Vulnerability Detection. arXiv 2025 [Paper] [Code]
✨ (12/2025) VulnLLM-R: Specialized Reasoning LLM with Agent Scaffold for Vulnerability Detection. arXiv 2025 [Paper] [Code]
✨ (12/2025) On the Effectiveness of Instruction-Tuning Local LLMs for Identifying Software Vulnerabilities. arXiv 2025 [Paper]
✨ (12/2025) Diverse LLMs vs. Vulnerabilities: Who Detects and Fixes Them Better?. arXiv 2025 [Paper] [Code]
✨ (11/2025) Retrieval-Augmented Few-Shot Prompting Versus Fine-Tuning for Code Vulnerability Detection. FLLM 2025 [Paper]
✨ (11/2025) Should We Evaluate LLM Based Security Analysis Approaches on Open Source Systems?. ASE 2025 [Paper]
✨ (11/2025) LOSVER: Line-Level Modifiability Signal-Guided Vulnerability Detection and Classification. ASE 2025 [Paper] [Code] [Code]
✨ (11/2025) An Empirical Evaluation of LLM-Based Approaches for Code Vulnerability Detection: RAG, SFT, and Dual-Agent Systems. CASCON 2025 [Paper]
(11/2025) Leveraging Self-Paced Learning for Software Vulnerability Detection. arXiv 2025 [Paper] [Code]
(11/2025) Specification-Guided Vulnerability Detection with Large Language Models. arXiv 2025 [Paper] [Code]
(11/2025) Compressing Large Language Models for SQL Injection Detection: A Case Study on Deep Seek-Coder and Meta-llama-3-70b-instruct. FRUCT 2025 [Paper]
(11/2025) VulTrLM: LLM-assisted Vulnerability Detection via AST Decomposition and Comment Enhancement. EMSE 2025 [Paper]
(11/2025) Cross-Domain Evaluation of Transformer-Based Vulnerability Detection on Open and Industry Data. PROFES 2025 [Paper] [Code]
(11/2025) Learning-based Models for Vulnerability Detection: An Extensive Study. EMSE 2025 [Paper] [Code]
(11/2025) A Sequential Multi-Stage Approach for Code Vulnerability Detection via Confidence- and Collaboration-based Decision Making. EMNLP 2025 [Paper]
✨ (10/2025) Catching Common Vulnerabilities with Code Language Models. SecDev 2025 [Paper] [Code]
✨ (10/2025) Transfer-Guided Konwledge Distillation for Enhancing Cross-Project Vulnerability Detection. CCNS 2025 [Paper]
✨ (10/2025) Code Vulnerability Detection Method Based On PreTrained Language Model and Gating Graph Neural Network. CBASE 2025 [Paper]
✨ (10/2025) VLD-LP: Vulnerability Detection and Root Cause Localization with Large Language Model and Parameter-efficient Language Model Tuning. SMC 2025 [Paper]
✨ (10/2025) The Richer Representation Fallacy: Are We Just Adding Noise to LLM-based Software Vulnerability Detectors?. ICOCO 2025 [Paper]
✨ (10/2025) CTVD: Collaborative Training of Deep Learning and Large Model for C/C++ Source Code Vulnerability Detection. SMC 2025 [Paper]
(10/2025) Leveraging Intra-and Inter-References in Vulnerability Detection using Multi-Agent Collaboration Based on LLMs. Cluster Computing 2025 [Paper]
(10/2025) iCodeReviewer: Improving Secure Code Review with Mixture of Prompts. arXiv 2025 [Paper]
(10/2025) Bridging Semantics & Structure for Software Vulnerability Detection using Hybrid Network Models. arXiv 2025 [Paper] [Code]
(10/2025) FuncVul: An Effective Function Level Vulnerability Detection Model using LLM and Code Chunk. ESORICS 2025 [Paper] [Code]
(10/2025) On Selecting Few-Shot Examples for LLM-based Code Vulnerability Detection. arXiv 2025 [Paper]
(10/2025) A Zero-Shot Framework for Cross-Project Vulnerability Detection in Source Code. EMSE 2025 [Paper] [Code]
(10/2025) Towards Explainable Vulnerability Detection With Large Language Models. TSE 2025 [Paper]
(10/2025) MulVuln: Enhancing Pre-trained LMs with Shared and Language-Specific Knowledge for Multilingual Vulnerability Detection. arXiv 2025 [Paper]
(10/2025) Llama-Based Source Code Vulnerability Detection: Prompt Engineering vs Fine Tuning. ESORICS 2025 [Paper] [Code]
(10/2025) Real-VulLLM: An LLM Based Assessment Framework in the Wild. arXiv 2025 [Paper]
✨ (10/2025) A Comprehensive Comparison of LLaMA 3.1 and Traditional ML Approaches in Automated Vulnerability Detection. AICCSA 2025 [Paper]
(10/2025) Distilling Lightweight Language Models for C/C++ Vulnerabilities. arXiv 2025 [Paper] [[Code](https://github.com/yangxiaoxuan123/ FineSec_detect)]
(10/2025) Sparse-MoE: Syntax-Aware Multi-view Mixture of Experts for Long-Sequence Software Vulnerability Detection. ADMA 2025 [Paper]
✨ (09/2025) Transformer-Based Semantic Embeddings and Hybrid Neural Networks for Robust Software Vulnerability Detection. i-PACT 2025 [Paper]
(09/2025) DeepVulHunter: Enhancing the Code Vulnerability Detection Capability of LLMs through Multi-Round Analysis. JIIS 2025 [Paper]
(09/2025) Can LLM Prompting Serve as a Proxy for Static Analysis in Vulnerability Detection. arXiv 2025 [Paper]
(09/2025) GPTVD: vulnerability detection and analysis method based on LLM’s chain of thoughts. ASE 2025 [Paper] [Code]
(09/2025) An Advanced Detection Framework for Embedded System Vulnerabilities. IEEE Access 2025 [Paper]
(09/2025) Utilizing Large Programming Language Models on Software Vulnerability Detection. ASYU 2025 [Paper]
(09/2025) MAVUL: Multi-Agent Vulnerability Detection via Contextual Reasoning and Interactive Refinement. arXiv 2025 [Paper] [Code]
(09/2025) PIONEER: Improving the Robustness of Student Models when Compressing Pre-Trained Models of Code. ASE 2025 [Paper] [Code]
(09/2025) Ensembling Large Language Models for Code Vulnerability Detection: An Empirical Evaluation. arXiv 2025 [Paper] [Code]
(09/2025) VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detection. arXiv 2025 [Paper]
✨ (08/2025) Optimizing Code Vulnerability Detection via GRPO and SFT Fine-Tuning of Compact LLMs. DSC 2025 [Paper]
(08/2025) VulPr: A Prompt Learning-based Method for Vulnerability Detection. EIT 2025 [Paper]
(08/2025) Improving Software Security Through a LLM-Based Vulnerability Detection Model. DEXA 2025 [Paper]
(08/2025) MalCodeAI: Autonomous Vulnerability Detection and Remediation via Language Agnostic Code Reasoning. IRI 2025 [Paper]
(08/2025) Large Language Models Versus Static Code Analysis Tools: A Systematic Benchmark for Vulnerability Detection. arXiv 2025 [Paper] [Code]
(08/2025) Enhancing Fine-Grained Vulnerability Detection With Reinforcement Learning. TSE 2025 [Paper] [Code]
(08/2025) CryptoScope: Utilizing Large Language Models for Automated Cryptographic Logic Vulnerability Detection. arXiv 2025 [Paper]
(08/2025) Out of Distribution, Out of Luck: How Well Can LLMs Trained on Vulnerability Datasets Detect Top 25 CWE Weaknesses?. arXiv 2025 [Paper] [Code]
(08/2025) LLM-GUARD: Large Language Model-Based Detection and Repair of Bugs and Security Vulnerabilities in C++ and Python. arXiv 2025 [Paper] [Code]
(08/2025) Multimodal Fusion for Vulnerability Detection: Integrating Sequence and Graph-Based Analysis with LLM Augmentation. MAPR 2025 [Paper]
(08/2025) SAFE: A Novel Approach For Software Vulnerability Detection from Enhancing The Capability of Large Language Models. ASIACCS 2025 [Paper]
(08/2025) Software Vulnerability Detection using Large Language Models. SecureComm 2025 [Paper]
(08/2025) Data and Context Matter: Towards Generalizing AI-based Software Vulnerability Detection. arXiv 2025 [Paper]
(08/2025) Think Broad, Act Narrow: CWE Identification with Multi-Agent Large Language Models. arXiv 2025 [Paper] [Code]
✨ (07/2025) Enhancing Vulnerability Detection by Fusing Code Semantic Features with LLM-generated Explanations. Information Fusion 2025 [Paper] [Code]
✨ (07/2025) Structural Semantic Enhancement: Better Integrating Code Semantics for Vulnerability Detection. InfSof 2025 [Paper]
(07/2025) An Automatic Classification Model for Long Code Vulnerabilities Based on the Teacher-Student Framework. QRS 2025 [Paper]
(07/2025) LLMxCPG: Context-Aware Vulnerability Detection Through Code Property Graph-Guided Large Language Models. USENIX Security 2025 [Paper] [Code] [Code]
(07/2025) CLeVeR: Multi-modal Contrastive Learning for Vulnerability Code Representation. ACL 2025 [Paper] [Code]
(07/2025) Revisiting Pre-trained Language Models for Vulnerability Detection. arXiv 2025 [Paper]
(07/2025) Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimization. arXiv 2025 [Paper]
(07/2025) HgtJIT: Just-in-Time Vulnerability Detection Based on Heterogeneous Graph Transformer. TDSC 2025 [Paper]
(07/2025) AI-Powered Vulnerability Detection in Code Using BERT-Based LLM with Transparency Measures. ITC-Egypt 2025 [Paper]
(07/2025) Benchmarking LLMs and LLM-based Agents in Practical Vulnerability Detection for Code Repositories. Unknown 2025 [Paper]
(06/2025) VulnTeam: A Team Collaboration Framework for LLM-based Vulnerability Detection. IJCNN 2025 [Paper]
(06/2025) One-for-All Does Not Work! Enhancing Vulnerability Detection by Mixture-of-Experts (MoE). PACMSE 2025 [Paper]
(06/2025) Improving Vulnerability Type Prediction and Line-Level Detection via Adversarial Training-based Data Augmentation and Multi-Task Learning. arXiv 2025 [Paper] [Code]
(06/2025) Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAG. arXiv 2025 [Paper] [Code]
(06/2025) Expert-in-the-Loop Systems with Cross-Domain and In-Domain Few-Shot Learning for Software Vulnerability Detection. arXiv 2025 [Paper]
(06/2025) Evaluating LLaMA 3.2 for Software Vulnerability Detection. EICC 2025 [Paper]
(06/2025) How Well Do Large Language Models Serve as End-to-End Secure Code Agents for Python?. arXiv 2025 [Paper] [Code]
(06/2025) Detecting Code Vulnerabilities using LLMs. DSN 2025 [Paper] [Code]
(06/2025) LPASS: Linear Probes as Stepping Stones for Vulnerability Detection using Compressed LLMs. JISA 2025 [Paper]
(06/2025) Smart Cuts: Enhance Active Learning for Vulnerability Detection by Pruning Bad Seeds. arXiv 2025 [Paper]
(06/2025) CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics. arXiv 2025 [Paper] [Code]
(06/2025) Large Language Models for Multilingual Vulnerability Detection: How Far Are We?. arXiv 2025 [Paper] [Code]
(06/2025) Large Language Models for In-File Vulnerability Localization Can Be ""Lost in the End"". PACMSE 2025 [Paper] [Code]
(06/2025) LLM4Vuln: A Unified Evaluation Framework for Decoupling and Enhancing LLMs' Vulnerability Reasoning. arXiv 2025 [Paper] [Code]
(06/2025) ANVIL: Anomaly-based Vulnerability Identification without Labelled Training Data. arXiv 2025 [Paper] [Code]
(06/2025) Line-level Semantic Structure Learning for Code Vulnerability Detection. Internetware 2025 [Paper] [Code]
(06/2025) SecureMind: A Framework for Benchmarking Large Language Models in Memory Bug Detection and Repair. ISMM 2025 [Paper] [Code]
(06/2025) VuL-MCBERT: A Vulnerability Detection Method Based on Self-Supervised Contrastive Learning. CAIBDA 2025 [Paper]
(06/2025) Boosting Vulnerability Detection of LLMs via Curriculum Preference Optimization with Synthetic Reasoning Data. arXiv 2025 [Paper] [Code]
(06/2025) Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs. PACMSE 2025 [Paper]
(06/2025) An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factors. arXiv 2025 [Paper] [Code]
(05/2025) SecVulEval: Benchmarking LLMs for Real-World C/C++ Vulnerability Detection. arXiv 2025 [Paper] [Code]
(05/2025) AutoAdapt: On the Application of AutoML for Parameter-Efficient Fine-Tuning of Pre-Trained Code Models. TOSEM 2025 [Paper] [Code]
(05/2025) Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues. ICSE 2025 [Paper]
(05/2025) LLaVul: A Multimodal LLM for Interpretable Vulnerability Reasoning about Source Code. ICSC 2025 [Paper]
(05/2025) A Comparative Study of Machine Learning and Large Language Models for SQL and NoSQL Injection Vulnerability Detection. SIST 2025 [Paper]
(05/2025) Are Sparse Autoencoders Useful for Java Function Bug Detection?. arXiv 2025 [Paper]
(05/2025) ♪ With a Little Help from My (LLM) Friends: Enhancing Static Analysis with LLMs to Detect Software Vulnerabilities. ICSE 2025 [Paper]
(05/2025) GraphCodeBERT-Augmented Graph Attention Networks for Code Vulnerability Detection. CAI 2025 [Paper]
(05/2025) Leveraging Large Language Models for Command Injection Vulnerability Analysis in Python: An Empirical Study on Popular Open-Source Projects. arXiv 2025 [Paper]
(05/2025) Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agents. arXiv 2025 [Paper] [Code]
(05/2025) Adversarial Training for Robustness Enhancement in LLM-Based Code Vulnerability Detection. CISCE 2025 [Paper]
(05/2025) Learning to Focus: Context Extraction for Efficient Code Vulnerability Detection with Language Models. arXiv 2025 [Paper]
(05/2025) An Automated Code Review Framework Based on BERT and Qianwen Large Model. CCAI 2025 [Paper]
(04/2025) Human-Understandable Explanation for Software Vulnerability Prediction. JSS 2025 [Paper] [Code]
(04/2025) A Software Vulnerability Detection Model Combined with Graph Simplification. AIBDF 2025 [Paper]
(04/2025) Case Study: Fine-tuning Small Language Models for Accurate and Private CWE Detection in Python Code. arXiv 2025 [Paper] [Code] [Code]
(04/2025) Vulnerability Detection with Code Language Models: How Far are We?. ICSE 2025 [Paper] [Code]
(04/2025) Everything You Wanted to Know About LLM-based Vulnerability Detection But Were Afraid to Ask. arXiv 2025 [Paper] [Code]
(04/2025) IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities. ICLR 2025 [Paper] [Code]
(04/2025) Trace Gadgets: Minimizing Code Context for Machine Learning-Based Vulnerability Prediction. arXiv 2025 [Paper]
(04/2025) An Ensemble Transformer Approach with Cross-Attention for Automated Code Security Vulnerability Detection and Documentation. ISDFS 2025 [Paper]
(04/2025) Metamorphic-Based Many-Objective Distillation of LLMs for Code-Related Tasks. ICSE 2025 [Paper] [Code]
(04/2025) XGV-BERT: Leveraging Contextualized Language Model and Graph Neural Network for Efficient Software Vulnerability Detection. The Journal of Supercomputing 2025 [Paper]
(04/2025) Leveraging Multi-Task Learning to Improve the Detection of SATD and Vulnerability. ICPC 2025 [Paper] [Code]
(04/2025) Closing the Gap: A User Study on the Real-world Usefulness of AI-powered Vulnerability Detection & Repair in the IDE. ICSE 2025 [Paper] [Code]
(04/2025) R2Vul: Learning to Reason about Software Vulnerabilities with Reinforcement Learning and Structured Reasoning Distillation. arXiv 2025 [Paper] [Code]
(04/2025) Context-Enhanced Vulnerability Detection Based on Large Language Models. TOSEM 2025 [Paper] [Code]
(04/2025) SSRFSeek: An LLM-based Static Analysis Framework for Detecting SSRF Vulnerabilities in PHP Applications. AINIT 2025 [Paper]
(03/2025) CASTLE: Benchmarking Dataset for Static Code Analyzers and LLMs towards CWE Detection. TASE 2025 [Paper] [Code]
(03/2025) SecureFalcon: Are We There Yet in Automated Software Vulnerability Detection With LLMs?. TSE 2025 [Paper]
✨ (03/2025) Impact of Identifier Normalization on Vulnerability Detection Techniques. SANER 2025 [Paper] [Code]
(03/2025) Understanding the Effectiveness of Large Language Models in Detecting Security Vulnerabilities. ICST 2025 [Paper] [Code]
(03/2025) Assessing the Effectiveness of LLMs in Android Application Vulnerability Analysis. ADIoT 2025 [Paper]
(03/2025) Steering Large Language Models for Vulnerability Detection. ICASSP 2025 [Paper]
(03/2025) HALURust: Exploiting Hallucinations of Large Language Models to Detect Vulnerabilities in Rust. arXiv 2025 [Paper]
(03/2025) You Only Train Once: A Flexible Training Framework for Code Vulnerability Detection Driven by Vul-Vector. arXiv 2025 [Paper]
(03/2025) Benchmarking Large Language Models for Multi-Language Software Vulnerability Detection. arXiv 2025 [Paper] [Code]
(03/2025) Reasoning with LLMs for Zero-Shot Vulnerability Detection. arXiv 2025 [Paper] [Code]
(02/2025) EFVD: A Framework of Source Code Vulnerability Detection via Fusion of Enhanced Graph Representation Learning and Pre-trained Transformer-Based Model. CNSSE 2025 [Paper]
(02/2025) Fine-Tuning Transformer LLMs for Detecting SQL Injection and XSS Vulnerabilities. ICAIIC 2025 [Paper]
(02/2025) Finetuning Large Language Models for Vulnerability Detection. IEEE Access 2025 [Paper] [Code]
(02/2025) Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study. IEEE Access 2025 [Paper]
(02/2025) Manual Prompt Engineering is Not Dead: A Case Study on Large Language Models for Code Vulnerability Detection with DSPy. CDMA 2025 [Paper]
(02/2025) AIDetectVul: Software Vulnerability Detection Method Based on Feature Fusion of Pre-trained Models. ICCECE 2025 [Paper]
(01/2025) DMVL4AVD: A Deep Multi-View Learning Model for Automated Vulnerability Detection. Neural Comput. Appl. 2025 [Paper] [Code]
(01/2025) Helping LLMs Improve Code Generation Using Feedback from Testing and Static Analysis. arXiv 2025 [Paper]
(01/2025) CGP-Tuning: Structure-Aware Soft Prompt Tuning for Code Vulnerability Detection. arXiv 2025 [Paper]
(01/2025) Investigating Large Language Models for Code Vulnerability Detection: An Experimental Study. arXiv 2025 [Paper] [Code] [Code]
(01/2025) Sink Vulnerability Type Prediction Using Small Language Model (SLM). IC3ECSBHI 2025 [Paper]
(01/2025) To Err is Machine: Vulnerability Detection Challenges LLM Reasoning. arXiv 2025 [Paper] [Code]
(01/2025) Streamlining Security Vulnerability Triage with Large Language Models. arXiv 2025 [Paper] [Code]
(01/2025) A Vulnerability Detection Framework Based on Graph Decomposition Fusion and Augmented Abstract Syntax Tree. BDICN 2025 [Paper]

2024

(12/2024) Vulnerability Detection in Popular Programming Languages with Language Models. arXiv 2024 [Paper] [Code]
(12/2024) On the Compression of Language Models for Code: An Empirical Study on CodeBERT. SANER 2024 [Paper] [Code]
(12/2024) LLM-Based Approach for Buffer Overflow Detection in Source Code. CIT 2024 [Paper]
(12/2024) A Source Code Vulnerability Detection Method Based on Positive-Unlabeled Learning. RICAI 2024 [Paper]
(12/2024) Evaluating Large Language Models in Vulnerability Detection Under Variable Context Windows. ICMLA 2024 [Paper]
(12/2024) EnStack: An Ensemble Stacking Framework of Large Language Models for Enhanced Vulnerability Detection in Source Code. BigData 2024 [Paper]
(12/2024) Software Vulnerability Detection Using LLM: Does Additional Information Help?. ACSAC 2024 [Paper] [Code]
(12/2024) Enhancing Source Code Vulnerability Detection Using Flattened Code Graph Structures. ICFTIC 2024 [Paper]
(12/2024) SQL Injection Vulnerability Detection Based on Pissa-Tuned Llama 3 Large Language Model. ICFTIC 2024 [Paper]
(12/2024) A Method of SQL Injection Attack Detection Based on Large Language Models. CNTEIE 2024 [Paper]
(12/2024) MVD: A Multi-Lingual Software Vulnerability Detection Framework. arXiv 2024 [Paper] [Code]
(12/2024) Python Source Code Vulnerability Detection Based on CodeBERT Language Model. ACAI 2024 [Paper]
(11/2024) RealVul: Can We Detect Vulnerabilities in Web Applications with LLM?. EMNLP 2024 [Paper]
(11/2024) StagedVulBERT: Multigranular Vulnerability Detection With a Novel Pretrained Code Model. TSE 2024 [Paper] [Code]
(11/2024) Applying Contrastive Learning to Code Vulnerability Type Classification. EMNLP 2024 [Paper]
(11/2024) Boosting Cybersecurity Vulnerability Scanning based on LLM-supported Static Application Security Testing. arXiv 2024 [Paper]
(11/2024) Enhancing Vulnerability Detection Efficiency: An Exploration of Light-weight LLMs with Hybrid Code Features. JISA 2024 [Paper] [Code]
(11/2024) Research on the LLM-Driven Vulnerability Detection System Using LProtector. ICDSCA 2024 [Paper]
(11/2024) Enhanced LLM-Based Framework for Predicting Null Pointer Dereference in Source Code. arXiv 2024 [Paper]
(10/2024) Vulnerability Prediction using Pre-trained Models: An Empirical Evaluation. MASCOTS 2024 [Paper] [Code]
(10/2024) Fine-Tuning Pre-trained Model with Optimizable Prompt Learning for Code Vulnerability Detection. ISSRE 2024 [Paper] [Code]
(10/2024) Improving Long-Tail Vulnerability Detection Through Data Augmentation Based on Large Language Models. ICSME 2024 [Paper] [Code]
(10/2024) Exploring AI for Vulnerability Detection and Repair. CARS 2024 [Paper]
(10/2024) DetectBERT: Code Vulnerability Detection. GCCIT 2024 [Paper]
(10/2024) VULREM: Fine-Tuned BERT-Based Source-Code Potential Vulnerability Scanning System to Mitigate Attacks in Web Applications. Applied Sciences 2024 [Paper]
(10/2024) A Qualitative Study on Using ChatGPT for Software Security: Perception vs. Practicality. TPS-ISA 2024 [Paper] [Code]
(10/2024) A Source Code Vulnerability Detection Method Based on Adaptive Graph Neural Networks. ASE 2024 [Paper]
(10/2024) Vul-LMGNNs: Fusing Language Models and Online-distilled Graph Neural Networks for Code Vulnerability Detection. Information Fusion 2024 [Paper] [Code]
(10/2024) SecureQwen: Leveraging LLMs for Vulnerability Detection in Python Codebases. COSE 2024 [Paper]
(10/2024) VulnerAI: GPT Based Web Application Vulnerability Detection. ICAMAC 2024 [Paper]
(10/2024) DLAP: A Deep Learning Augmented Large Language Model Prompting Framework for Software Vulnerability Detection. JSS 2024 [Paper] [Code]
(10/2024) Multitask-Based Evaluation of Open-Source LLM on Software Vulnerability. TSE 2024 [Paper] [Code]
(10/2024) Detecting Source Code Vulnerabilities Using Fine-Tuned Pre-Trained LLMs. ICSP 2024 [Paper]
(09/2024) Outside the Comfort Zone: Analysing LLM Capabilities in Software Vulnerability Detection. ESORICS 2024 [Paper]
(09/2024) Navigating (In)Security of AI-Generated Code. CSR 2024 [Paper]
(09/2024) Bridge and Hint: Extending Pre-trained Language Models for Long-Range Code. ISSTA 2024 [Paper] [Code]
(09/2024) Can a Llama Be a Watchdog? Exploring Llama 3 and Code Llama for Static Application Security Testing. CSR 2024 [Paper]
(09/2024) May the Source Be with You: On ChatGPT, Cybersecurity, and Secure Coding. Information 2024 [Paper]
(09/2024) Enhancing Source Code Security with LLMs: Demystifying The Challenges and Generating Reliable Repairs. arXiv 2024 [Paper]
(09/2024) Code Vulnerability Detection: A Comparative Analysis of Emerging Large Language Models. arXiv 2024 [Paper]
(09/2024) SCALE: Constructing Structured Natural Language Comment Trees for Software Vulnerability Detection. ISSTA 2024 [Paper] [Code]
(09/2024) Beyond ChatGPT: Enhancing Software Quality Assurance Tasks with Diverse LLMs and Validation Techniques. arXiv 2024 [Paper] [Code]
(09/2024) VulnLLMEval: A Framework for Evaluating Large Language Models in Software Vulnerability Detection and Patching. arXiv 2024 [Paper]
(08/2024) VulDetectBench: Evaluating the Deep Capability of Vulnerability Detection with Large Language Models. arXiv 2024 [Paper] [Code]
(08/2024) Defect-Scanner: A Comparative Empirical Study on Language Model and Deep Learning Approach for Software Vulnerability Detection. IJIS 2024 [Paper]
(08/2024) From Generalist to Specialist: Exploring CWE-Specific Vulnerability Detection. arXiv 2024 [Paper]
(08/2024) Large Language Models for Secure Code Assessment: A Multi-Language Empirical Study. arXiv 2024 [Paper]
(08/2024) Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuning. ACL 2024 [Paper] [Code]
(08/2024) Unintentional Security Flaws in Code: Automated Defense via Root Cause Analysis. arXiv 2024 [Paper] [Code]
(08/2024) Uncovering the Limits of Machine Learning for Automatic Vulnerability Detection. USENIX Security 2024 [Paper] [Code] [Code]
(08/2024) : VulSim: Leveraging Similarity of Multi-Dimensional Neighbor Embeddings for Vulnerability Detection. USENIX Security 2024 [Paper] [Code]
(07/2024) Enhancing Software Code Vulnerability Detection Using GPT-4o and Claude-3.5 Sonnet: A Study on Prompt Engineering Techniques. Electronics 2024 [Paper]
(07/2024) MultiVD: A Transformer-based Multitask Approach for Software Vulnerability Detection. SECRYPT 2024 [Paper]
(07/2024) DFEPT: Data Flow Embedding for Enhancing Pre-Trained Model Based Vulnerability Detection. Internetware 2024 [Paper] [Code]
(07/2024) Vulnerability Classification on Source Code Using Text Mining and Deep Learning Techniques. QRS 2024 [Paper] [Code]
(07/2024) Exploration On Prompting LLM With Code-Specific Information For Vulnerability Detection. SSE 2024 [Paper]
(07/2024) Effectiveness of ChatGPT for Static Analysis: How Far Are We?. AIware 2024 [Paper] [Code]
(07/2024) Automated Software Vulnerability Static Code Analysis Using Generative Pre-Trained Transformer Models. arXiv 2024 [Paper]
(07/2024) M2CVD: Enhancing Vulnerability Understanding through Multi-Model Collaboration for Code Vulnerability Detection. TOSEM 2024 [Paper] [Code]
(07/2024) SCL-CVD: Supervised Contrastive Learning for Code Vulnerability Detection via GraphCodeBERT. COSE 2024 [Paper]
(07/2024) Comparison of Static Application Security Testing Tools and Large Language Models for Repo-level Vulnerability Detection. arXiv 2024 [Paper]
(06/2024) Software Vulnerability Prediction in Low-Resource Languages: An Empirical Study of CodeBERT and ChatGPT. EASE 2024 [Paper] [Code]
(06/2024) Greening Large Language Models of Code. ICSE 2024 [Paper] [Code]
(06/2024) Security Vulnerability Detection with Multitask Self-Instructed Fine-Tuning of Large Language Models. arXiv 2024 [Paper] [Code]
(06/2024) Evaluating the Impact of Conventional Code Analysis Against Large Language Models in API Vulnerability Detection. EICC 2024 [Paper]
(06/2024) SVulDetector: Vulnerability Detection based on Similarity using Tree-based Attention and Weighted Graph Embedding Mechanisms. COSE 2024 [Paper] [Code]
(05/2024) DB-CBIL: A DistilBert-Based Transformer Hybrid Model Using CNN and BiLSTM for Software Vulnerability Detection. IEEE Access 2024 [Paper]
(05/2024) LLM-CloudSec: Large Language Model Empowered Automatic and Deep Vulnerability Analysis for Intelligent Clouds. INFOCOM 2024 [Paper] [Code]
(05/2024) LLMs Cannot Reliably Identify and Reason About Security Vulnerabilities (Yet?): A Comprehensive Evaluation, Framework, and Benchmarks. SP 2024 [Paper] [Code]
(05/2024) VulD-CodeBERT: CodeBERT-Based Vulnerability Detection Model for C/C++ Code. CISCE 2024 [Paper]
(05/2024) Large Language Model for Vulnerability Detection: Emerging Results and Future Directions. ICSE 2024 [Paper] [Code]
(04/2024) VulnGPT: Enhancing Source Code Vulnerability Detection Using AutoGPT and Adaptive Supervision Strategies. DCOSS-IoT 2024 [Paper]
(04/2024) BiT5: A Bidirectional NLP Approach for Advanced Vulnerability Detection in Codebase. Procedia Computer Science 2024 [Paper]
(04/2024) Software Vulnerability and Functionality Assessment using Large Language Models. ICSE 2024 [Paper]
(04/2024) Pre-training by Predicting Program Dependencies for Vulnerability Analysis Tasks. ICSE 2024 [Paper] [Code]
(04/2024) Towards Causal Deep Learning for Vulnerability Detection. ICSE 2024 [Paper] [Code]
(04/2024) ProRLearn: Boosting Prompt Tuning-based Vulnerability Detection by Reinforcement Learning. ASE 2024 [Paper] [Code]
(04/2024) VulEval: Towards Repository-Level Evaluation of Software Vulnerability Detection. arXiv 2024 [Paper]
(03/2024) Learning Defect Prediction from Unrealistic Data. SANER 2024 [Paper] [Code]
(03/2024) Python Source Code Vulnerability Detection with Named Entity Recognition. COSE 2024 [Paper] [Code]
(03/2024) Making Vulnerability Prediction more Practical: Prediction, Categorization, and Localization. IST 2024 [Paper] [Code]
(03/2024) GRACE: Empowering LLM-based Software Vulnerability Detection with Graph Structure and In-Context Learning. JSS 2024 [Paper] [Code]
(02/2024) A Preliminary Study on Using Large Language Models in Software Pentesting. NDSS 2024 [Paper]
(02/2024) TRACED: Execution-aware Pre-training for Source Code. ICSE 2024 [Paper] [Code]
(02/2024) LLbezpeky: Leveraging Large Language Models for Vulnerability Detection. arXiv 2024 [Paper]
(02/2024) Chain-of-Thought Prompting of Large Language Models for Discovering and Fixing Software Vulnerabilities. arXiv 2024 [Paper]
(01/2024) Your Instructions Are Not Always Helpful: Assessing the Efficacy of Instruction Fine-tuning for Software Vulnerability Detection. arXiv 2024 [Paper]

2023

(12/2023) Joint Geometrical and Statistical Domain Adaptation for Cross-domain Code Vulnerability Detection. EMNLP 2023 [Paper]
(12/2023) ChatGPT for Vulnerability Detection, Classification, and Repair: How Far Are We?. APSEC 2023 [Paper] [Code]
(12/2023) Code Defect Detection Method Based on BERT and Ensemble. ICCC 2023 [Paper]
(12/2023) Assessing the Effectiveness of Vulnerability Detection via Prompt Tuning: An Empirical Study. APSEC 2023 [Paper] [Code]
(12/2023) Enhancing Code Security Through Open-source Large Language Models: A Comparative Study. FPS 2023 [Paper]
(12/2023) Optimizing Pre-trained Language Models for Efficient Vulnerability Detection in Code Snippets. ICCC 2023 [Paper]
(12/2023) Exploring the Limits of ChatGPT in Software Security Applications. arXiv 2023 [Paper]
(11/2023) How To Get Better Embeddings with Code Pre-trained Models? An Empirical Study. arXiv 2023 [Paper]
(11/2023) AIBugHunter: A Practical Tool for Predicting, Classifying and Repairing Software Vulnerabilities. EMSE 2023 [Paper] [Code]
(11/2023) The EarlyBIRD Catches the Bug: On Exploiting Early Layers of Encoder Models for More Efficient Code Classification. ESEC/FSE 2023 [Paper] [Code]
(11/2023) Distinguishing Look-Alike Innocent and Vulnerable Code by Subtle Semantic Representation Learning and Explanation. ESEC/FSE 2023 [Paper] [Code]
(11/2023) Do Language Models Learn Semantics of Code? A Case Study in Vulnerability Detection. arXiv 2023 [Paper] [Code]
(11/2023) Software Vulnerabilities Detection Based on a Pre-trained Language Model. TrustCom 2023 [Paper]
(10/2023) DiverseVul: A New Vulnerable Source Code Dataset for Deep Learning Based Vulnerability Detection. RAID 2023 [Paper] [Code]
(10/2023) PTLVD:Program Slicing and Transformer-based Line-level Vulnerability Detection System. SCAM 2023 [Paper] [Code]
(10/2023) Software Vulnerability Detection using Large Language Models. ISSRE 2023 [Paper]
(10/2023) Enhancing Large Language Models for Secure Code Generation: A Dataset-driven Study on Vulnerability Mitigation. arXiv 2023 [Paper]
(09/2023) Function-Level Vulnerability Detection Through Fusing Multi-Modal Knowledge. ASE 2023 [Paper] [Code]
(09/2023) DefectHunter: A Novel LLM-Driven Boosted-Conformer-based Code Vulnerability Detection Mechanism. arXiv 2023 [Paper] [Code]
(09/2023) When Less is Enough: Positive and Unlabeled Learning Model for Vulnerability Detection. ASE 2023 [Paper] [Code]
(08/2023) Using ChatGPT as a Static Application Security Testing Tool. arXiv 2023 [Paper] [Code]
(08/2023) VulExplainer: A Transformer-Based Hierarchical Distillation for Explaining Vulnerability Types. TSE 2023 [Paper] [Code]
(08/2023) Software Vulnerability Detection with GPT and In-Context Learning. DSC 2023 [Paper]
(08/2023) Can Large Language Models Find And Fix Vulnerable Software?. arXiv 2023 [Paper]
(07/2023) Leveraging Deep Learning Models for Cross-function Null Pointer Risks Detection. AITest 2023 [Paper]
(07/2023) An Unbiased Transformer Source Code Learning with Semantic Vulnerability Graph. EuroS&P 2023 [Paper] [Code]
(07/2023) VulDetect: A novel technique for detecting software vulnerabilities using Language Models. CSR 2023 [Paper]
(07/2023) An Enhanced Vulnerability Detection in Software Using a Heterogeneous Encoding Ensemble. ISCC 2023 [Paper]
(06/2023) New Tricks to Old Codes: Can AI Chatbots Replace Static Code Analysis Tools?. EICC 2023 [Paper] [Code]
(06/2023) Vulnerability Detection by Learning From Syntax-Based Execution Paths of Code. TSE 2023 [Paper] [Code]
(05/2023) An Empirical Study of Deep Learning Models for Vulnerability Detection. ICSE 2023 [Paper] [Code]
(05/2023) Transformer-based Vulnerability Detection in Code at EditTime: Zero-shot, Few-shot, or Fine-tuning?. arXiv 2023 [Paper]
(05/2023) Keeping Pace with Ever-Increasing Data: Towards Continual Learning of Code Intelligence Models. ICSE 2023 [Paper] [Code]
(05/2023) Detecting Vulnerabilities in IoT Software: New Hybrid Model and Comprehensive Data Analysis. JISA 2023 [Paper]
(05/2023) VulDefend: A Novel Technique based on Pattern-exploiting Training for Detecting Software Vulnerabilities Using Language Models. JEEIT 2023 [Paper]
(04/2023) Evaluation of ChatGPT Model for Vulnerability Detection. arXiv 2023 [Paper]

2022

(12/2022) BBVD: A BERT-based Method for Vulnerability Detection. IJACSA 2022 [Paper]
(12/2022) Exploring Transformers for Multi-Label Classification of Java Vulnerabilities. QRS 2022 [Paper] [Code]
(12/2022) Transformer-Based Language Models for Software Vulnerability Detection. ACSAC 2022 [Paper] [Code]
(12/2022) PATVD: Vulnerability Detection Based on Pre-training Techniques and Adversarial Training. SmartWorld/UIC/ScalCom/DigitalTwin/PriComp/Meta 2022 [Paper]
(11/2022) Multi-view Pre-trained Model for Code Vulnerability Identification. WASA 2022 [Paper]
(11/2022) Distilled and Contextualized Neural Models Benchmarked for Vulnerable Function Detection. Mathematics 2022 [Paper]
(11/2022) BERT-Based Vulnerability Type Identification with Effective Program Representation. WASA 2022 [Paper]
(10/2022) VulDeBERT: A Vulnerability Detection System Using BERT. ISSRE 2022 [Paper] [Code]
(07/2022) VulBERTa: Simplified Source Code Pre-Training for Vulnerability Detection. IJCNN 2022 [Paper] [Code]
(06/2022) Cyber Security Vulnerability Detection Using Natural Language Processing. AIIoT 2022 [Paper]
(05/2022) LineVul: A Transformer-based Line-level Vulnerability Prediction. MSR 2022 [Paper] [Code]
(05/2022) LineVD: Statement-level Vulnerability Detection using Graph Neural Networks. MSR 2022 [Paper] [Code]
(03/2022) Intelligent Detection of Vulnerable Functions in Software through Neural Embedding-based Code Analysis. IJNM 2022 [Paper] [Code]
(01/2022) Deep Neural Embedding for Software Vulnerability Discovery: Comparison and Optimization. Security and Communication Networks 2022 [Paper] [Code]

2021

(12/2021) Automated Software Vulnerability Detection via Pre-trained Context Encoder and Self Attention. ICDF2C 2021 [Paper]
(11/2021) Detecting Integer Overflow Errors in Java Source Code via Machine Learning. ICTAI 2021 [Paper]
(06/2021) Unified Pre-training for Program Understanding and Generation. NAACL 2021 [Paper] [Code]
(05/2021) Security Vulnerability Detection Using Deep Learning Natural Language Processing. INFOCOM 2021 [Paper]

2020

(06/2020) Exploring Software Naturalness through Neural Language Models. arXiv 2020 [Paper]

Datasets

SARD. [Repo]
Juliet C/C++. [Repo]
Juliet Java. [Repo]
VulDeePecker. NDSS [Paper] [Repo]
Draper. ICMLA [Paper] [Repo]
Devign. NeurIPS [Paper] [Repo]
Big-Vul. MSR [Paper] [Repo]
D2A. ICSE-SEIP [Paper] [Repo]
Reveal. TSE [Paper] [Repo]
CVEfixes. PROMISE [Paper] [Repo]
CrossVul. ESEC/FSE [Paper] [Repo]
SecurityEval. MSR4P&S [Paper] [Repo]
DiverseVul. RAID [Paper] [Repo]
SVEN. CCS [Paper] [Repo]
FormAI. PROMISE [Paper] [Repo]
ReposVul. ICSE-Companion [Paper] [Repo]
PrimeVul. arXiv [Paper] [Repo]
PairVul. arXiv [Paper] [Repo]
MegaVul. MSR [Paper] [Repo]
CleanVul. arXiv [Paper] [Repo]

Contribution

If you want to suggest additions to the list of studies or datasets, please open a pull request or submit an issue.

License

🧠 Code & scripts (*.py, *.ipynb, etc.): Licensed under the MIT License.

Similar repos

yueyueL/ReliableLM4Code

Collections of research, benchmarks and tools towards more robust and reliable language models for…

iSEngLab/AwesomeLLM4APR

[TOSEM 2026]A Systematic Literature Review on Large Language Models for Automated Program Repair

246

Awesome-LogCodeSecurity-LLMs/Awesome-LogCodeSecurity-LLMs

codefuse-ai/Awesome-Code-LLM

[TMLR] A curated list of language modeling researches for code (and other software engineering…

3,447

SakiRinn/LLM4CVD

Investigating Large Language Models for Code Vulnerability Detection: An Experimental Study

saltudelft/ml4se

A curated list of papers, theses, datasets, and tools related to the application of Machine…

734

simon-p-j-r/LLM4Pentest

366

corca-ai/awesome-llm-security

A curation of awesome tools, documents and projects about LLM Security.

1,710