A Comprehensive Evaluation of Code Language Models for Security Patch Detection

Nils Loose, Joseph Bienhüls, Joseph Bienhüls +4

Automated detection of vulnerability-fixing commits (\vfcs) is critical for timely security patch deployment, as advisory databases lag patch releases by a median of 25 days and ma…