mlsanityData to 14 Oct 2026

QLPro: Automated Code Vulnerability Discovery via LLM and Static Code Analysis Integration

arXiv 2506.23644 ↗First posted 30 Jun 2025cs.SE cs.AI cs.CRcited by 6

Not on the map. Why?

Abstract (arXiv)

We introduce QLPro, a vulnerability detection framework that systematically integrates LLMs and static analysis tools to enable comprehensive vulnerability detection across entire open-source projects.We constructed a new dataset, JavaTest, comprising 10 open-source projects from GitHub with 62 confirmed vulnerabilities. CodeQL, a state-of-the-art static analysis tool, detected only 24 of these vulnerabilities while QLPro detected 41. Furthermore, QLPro discovered 6 previously unknown vulnerabilities, 2 of which have been confirmed as 0-days.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 5 of its 11 references that are in the map. First posted on arXiv 30 Jun 2025.

Builds on

5 of 11 references.

References · 5

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2021Evaluating Large Language Models Trained on Codecited by 8,320
  3. 2022InCoder: A Generative Model for Code Infilling and Synthesiscited by 498
  4. 2024IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilitiescited by 103
  5. 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 6.

6 papers.

  1. 2026Multi-Agent Taint Specification Extraction for Vulnerability Detectioncited by 3
  2. 2026SPECA: Specification-to-Checklist Agentic Auditing for Multi-Implementation Systems -- A Case Study on Ethereum Clientscited by 0
  3. 2026A Multi-Agent Framework for Automated Exploit Generation with Constraint-Guided Comprehension and Reflectioncited by 0
  4. 2026VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Serverscited by 0
  5. 2026Neuro-Symbolic Reasoning for Vulnerability Detectioncited by 0
  6. 2026Adversarial Testing of Automated Program Repair Agents for Security Vulnerabilitiescited by 0