SOURCE-LINKED INTELLIGENCE

The History Is the Detector: Executing CVE Patch History, End-to-End

arXiv · AI, language, vision and robotics · article · Sep 4, 2026 · UTC

Public vulnerability databases collect rich information about known software flaws, including their weakness types, affected components, and related patches. Fixing commits provide the exact code changes that removed these flaws. While these records capture why the original code was unsafe, they are documented mainly for human inspection rather than automated reuse. Consequently, the same unsafe conditions may still exist elsewhere in code without a known advisory, leaving much of this detection knowledge unused. We present BUGSTONE-E2E, a framework that transforms vulnerability history into e

Read original source ↗ Open in workspace

recordType

paper

region

Global