2 papers
cs.SE2026
VulnBump: A Benchmark for Fixing Vulnerable Dependencies in Real Projects While Keeping the Build and Tests Green
Gabija Pasiunaite, Ryan McMorrow, Brian Clark +2
Software composition analysis (SCA) tools report far more vulnerable dependencies than teams fix: in Snyk Open Source production data, 94% of vulnerability findings have a known fi…
cs.CR2026
Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?
Liran Tal, Johannes Kloos, Arsenii Rudich +2
We ran 300 repeated vulnerability-finding scans to measure how repeatable agentic large language model (LLM) security review is on the same JavaScript code, prompt, and benchmark h…