mlsanityData to 14 Oct 2026

Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues

arXiv 2501.05258 ↗First posted 9 Jan 2025cs.SE cs.AI cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

In today's digital landscape, the importance of timely and accurate vulnerability detection has significantly increased. This paper presents a novel approach that leverages transformer-based models and machine learning techniques to automate the identification of software vulnerabilities by analyzing GitHub issues. We introduce a new dataset specifically designed for classifying GitHub issues relevant to vulnerability detection. We then examine various classification techniques to determine their effectiveness. The results demonstrate the potential of this approach for real-world application in early vulnerability detection, which could substantially reduce the window of exploitation for software vulnerabilities. This research makes a key contribution to the field by providing a scalable and computationally efficient framework for automated detection, enabling the prevention of compromised software usage before official notifications. This work has the potential to enhance the security of open-source software ecosystems.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 8 of its 25 references that are in the map. First posted on arXiv 9 Jan 2025.

Builds on

8 of 25 references.

References · 8

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,166
  3. 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,391
  4. 2022MTEB: Massive Text Embedding Benchmarkcited by 640
  5. 2024NV-Embed: Improved Techniques for Training LLMs as Generalist Embedding Modelscited by 472
  6. 2022Text and Code Embeddings by Contrastive Pre-Trainingcited by 361
  7. 2024Outside the Comfort Zone: Analysing LLM Capabilities in Software Vulnerability Detectioncited by 16
  8. 2023DefectHunter: A Novel LLM-Driven Boosted-Conformer-based Code Vulnerability Detection Mechanismcited by 14

Built on by

Not cited yet.