Skip to content
NewA calmer, faster ZeroHour
Researchinfo

A Function-level Dataset of Vulnerable and Fixed Source Code in JavaScript and TypeScript

arXiv cs.CRby Tamás Viszkok ()1 min read2 · 2 reads
Read at arxiv.org
AI summary · grok-4.7Summaries by Vani AI

JsVul pairs vulnerable and fixed JavaScript and TypeScript functions from seven sources.

JsVul is a function-level dataset of pre-fix and post-fix JavaScript and TypeScript code curated from seven major sources. A language-specific pipeline removes minified code and cosmetic edits, normalizes syntax, and isolates security-related changes. Multi-stage deduplication and heuristic labeling produce a time-ordered JSONL corpus for vulnerability-detection training.

Key facts
  • Pairs vulnerable and fixed JavaScript and TypeScript functions.
  • Language-specific filtering drops minified code and cosmetic edits.
  • Time-ordered JSONL supports chronological model training and evaluation.
  • Authors argue language-aware preprocessing reduces dataset noise.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
javascripttypescriptvulnerability-detectiondatasetjsvulmachine-learning

From the original article

1 min read at arxiv.org

JavaScript and TypeScript are widely used in modern web development, making their security critical; however, automated vulnerability detection is often constrained by the availability of high-quality training data. Here we present JsVul, a dataset curated from seven major sources.

arXiv cs.CR

By Tamás Viszkok · arxiv.org

Read the full article at arXiv cs.CR

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.