The History Is the Detector: Executing CVE Patch History, End-to-End
Public vulnerability databases collect rich information about known software flaws, including their weakness types, affected components, and related patches. Fixing commits provide the exact code changes that removed these flaws. While these records capture why the original code was unsafe, they are documented mainly for human inspection rather than automated reuse. Consequently, the same unsafe…
We haven't written up this one. arXiv cs.AI has the full story — the link below goes straight to it.
