{
 "achievable": {
  "agent-vfc": {
   "detected_vuln": 1,
   "labeled_expected": 28,
   "labeled_fix_leaks": 4,
   "labeled_matched": 1,
   "labeled_recall": 0.03571428571428571,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 28,
   "silent_fix": 25,
   "specificity": 0.8928571428571429,
   "vuln_recall": 0.03571428571428571,
   "youden": -0.07142857142857138
  },
  "github": {
   "detected_vuln": 4,
   "labeled_expected": 6,
   "labeled_fix_leaks": 0,
   "labeled_matched": 4,
   "labeled_recall": 0.6666666666666666,
   "pair_correct": 4,
   "pair_pass_rate": 0.6666666666666666,
   "pairs": 6,
   "silent_fix": 6,
   "specificity": 1.0,
   "vuln_recall": 0.6666666666666666,
   "youden": 0.6666666666666666
  },
  "local": {
   "detected_vuln": 3,
   "labeled_expected": 28,
   "labeled_fix_leaks": 0,
   "labeled_matched": 28,
   "labeled_recall": 1.0,
   "pair_correct": 3,
   "pair_pass_rate": 1.0,
   "pairs": 3,
   "silent_fix": 3,
   "specificity": 1.0,
   "vuln_recall": 1.0,
   "youden": 1.0
  },
  "owasp": {
   "detected_vuln": 9,
   "labeled_expected": 40,
   "labeled_fix_leaks": 12,
   "labeled_matched": 9,
   "labeled_recall": 0.225,
   "pair_correct": 2,
   "pair_pass_rate": 0.05,
   "pairs": 40,
   "silent_fix": 28,
   "specificity": 0.7,
   "vuln_recall": 0.225,
   "youden": -0.07500000000000004
  },
  "sast": {
   "detected_vuln": 6,
   "labeled_expected": 10,
   "labeled_fix_leaks": 3,
   "labeled_matched": 6,
   "labeled_recall": 0.6,
   "pair_correct": 4,
   "pair_pass_rate": 0.4,
   "pairs": 10,
   "silent_fix": 7,
   "specificity": 0.7,
   "vuln_recall": 0.6,
   "youden": 0.29999999999999993
  },
  "vfc": {
   "detected_vuln": 9,
   "labeled_expected": 176,
   "labeled_fix_leaks": 66,
   "labeled_matched": 9,
   "labeled_recall": 0.05113636363636364,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 176,
   "silent_fix": 144,
   "specificity": 0.8181818181818182,
   "vuln_recall": 0.05113636363636364,
   "youden": -0.13068181818181812
  },
  "vfc-js": {
   "detected_vuln": 9,
   "labeled_expected": 17,
   "labeled_fix_leaks": 9,
   "labeled_matched": 9,
   "labeled_recall": 0.5294117647058824,
   "pair_correct": 4,
   "pair_pass_rate": 0.23529411764705882,
   "pairs": 17,
   "silent_fix": 10,
   "specificity": 0.5882352941176471,
   "vuln_recall": 0.5294117647058824,
   "youden": 0.11764705882352944
  },
  "vibe-py": {
   "detected_vuln": 15,
   "labeled_expected": 30,
   "labeled_fix_leaks": 0,
   "labeled_matched": 15,
   "labeled_recall": 0.5,
   "pair_correct": 15,
   "pair_pass_rate": 0.5,
   "pairs": 30,
   "silent_fix": 30,
   "specificity": 1.0,
   "vuln_recall": 0.5,
   "youden": 0.5
  }
 },
 "degradations": [
  {
   "pair": "claude-code-seeded-v2-crm-saas-django-partner-console-acct-p",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-crm-saas-django-partner-console-acct-r",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-education-lms-django-course-operati-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-education-lms-django-course-operations",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-fintech-lending-fastapi-loan-operat-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-fintech-lending-fastapi-loan-operation",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-healthcare-clinic-django-patient-op-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-healthcare-clinic-django-patient-opera",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-hr-payroll-django-payroll-operation-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-hr-payroll-django-payroll-operations-p",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-legal-case-django-case-operations-c-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-legal-case-django-case-operations-case",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-logistics-dispatch-fastapi-dispatch-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-logistics-dispatch-fastapi-dispatch-op",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-marketplace-commerce-fastapi-seller-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-marketplace-commerce-fastapi-seller-op",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-property-management-fastapi-tenant--2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-property-management-fastapi-tenant-ope",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-support-desk-fastapi-support-operat-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "claude-code-seeded-v2-support-desk-fastapi-support-operation",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-crm-saas-django-partner-console-acct-fo",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-crm-saas-django-partner-console-acct-va",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-education-lms-django-course-operatio-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-education-lms-django-course-operations-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-fintech-lending-fastapi-loan-operati-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-fintech-lending-fastapi-loan-operations",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-healthcare-clinic-django-patient-ope-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-healthcare-clinic-django-patient-operat",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-hr-payroll-django-payroll-operations-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-hr-payroll-django-payroll-operations-pa",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-legal-case-django-case-operations-ca-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-legal-case-django-case-operations-case-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-logistics-dispatch-fastapi-dispatch--2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-logistics-dispatch-fastapi-dispatch-ope",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-marketplace-commerce-fastapi-seller--2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-marketplace-commerce-fastapi-seller-ope",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-property-management-fastapi-tenant-o-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-property-management-fastapi-tenant-oper",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-support-desk-fastapi-support-operati-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-high-seeded-v2-support-desk-fastapi-support-operations",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-crm-saas-django-partner-console-account-wayb",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-crm-saas-django-partner-console-acct-bundle-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-education-lms-django-course-operations-co-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-education-lms-django-course-operations-cours",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-fintech-lending-fastapi-loan-operations-l-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-fintech-lending-fastapi-loan-operations-loan",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-healthcare-clinic-django-patient-operatio-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-healthcare-clinic-django-patient-operations-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-hr-payroll-django-payroll-operations-payr-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-hr-payroll-django-payroll-operations-payroll",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-legal-case-django-case-operations-case-bundl",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-legal-case-django-case-operations-case-retur",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-logistics-dispatch-fastapi-dispatch-opera-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-logistics-dispatch-fastapi-dispatch-operatio",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-marketplace-commerce-fastapi-seller-opera-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-marketplace-commerce-fastapi-seller-operatio",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-property-management-fastapi-tenant-operat-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-property-management-fastapi-tenant-operation",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-support-desk-fastapi-support-operations-t-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "codex-seeded-v2-support-desk-fastapi-support-operations-tick",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-crm-saas-django-partner-console-account-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-crm-saas-django-partner-console-acct-bun",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-education-lms-django-course-operation-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-education-lms-django-course-operations-c",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-fintech-lending-fastapi-loan-operatio-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-fintech-lending-fastapi-loan-operations-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-healthcare-clinic-django-patient-oper-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-healthcare-clinic-django-patient-operati",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-hr-payroll-django-payroll-operations--2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-hr-payroll-django-payroll-operations-pay",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-legal-case-django-case-operations-case-b",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-legal-case-django-case-operations-case-r",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-logistics-dispatch-fastapi-dispatch-o-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-logistics-dispatch-fastapi-dispatch-oper",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-marketplace-commerce-fastapi-seller-o-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-marketplace-commerce-fastapi-seller-oper",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-property-management-fastapi-tenant-op-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-property-management-fastapi-tenant-opera",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-support-desk-fastapi-support-operatio-2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "kimi-code-seeded-v2-support-desk-fastapi-support-operations-",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "ah-05-07-main-0f68d7",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "ai-file-manager-searcher-2c8f65",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "audienceos-command-center-route-7b2b31",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "backend-gym-main-37aec0",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "bricks-document-viewer-client-8daa7c",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "bushiri-index-bd1c99",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "career-copilot-matches-eaa75e",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "chatpro-index-99dcd3",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "comp-6000-capstone2-index-388195",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "easy-q-api-a31c36",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "ems-contract-analyzer-app-00884c",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "enterprise-ai-lakehouse-platform-main-11e36d",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "findconstructionstaffing-route-24edf4",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "fitnesstracker-communityfoods-115204",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "flytte24-views-8a5f7a",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "fusmle-index-47f075",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "green-mobile-offline-backend-example-482952",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "iterviz-orchestrator-c59620",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "jogo-da-velha-rotas-326bac",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "joidy-main-a2fa2c",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "learnly-page-a4c6b2",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "neutral-server-033e5f",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "niners-initializecollections-b90f9c",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "nuvanx-siteground-validate-page-templates-7ccb5b",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "shift-left-or-die-database-68a00a",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "signaldigest-route-8ca292",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "soulclaw-pw-session-1346a0",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "tabletap-safe-next-33ff1b",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "tracechantier-web-route-cbdafd",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  },
  {
   "pair": "unimart-backend-auth-controller-3ee79a",
   "reason": "pointer_pair_skipped",
   "stage": "pairs"
  }
 ],
 "known_limit": [
  "owasp-java-hash",
  "dsvw-dsvw-do-get",
  "python-insecure-app-main-try-hack-me",
  "pythonssti-main-read-root",
  "vampi-books-get-by-title",
  "vulnpy-deserialization-do-pickle-load",
  "lensops-kubernetesmanagement-fe4910"
 ],
 "loss": {
  "agent-vfc": {
   "known_limit": 1,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 0,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  },
  "github": {
   "known_limit": 0,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 0,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  },
  "local": {
   "known_limit": 0,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 0,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  },
  "owasp": {
   "known_limit": 0,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 0,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  },
  "sast": {
   "known_limit": 1,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 6,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  },
  "vfc": {
   "known_limit": 0,
   "parse_failed_files": 36,
   "unadjudicated_proposals": 128,
   "unresolved_function_labels": 24,
   "weak_labels": 0
  },
  "vfc-js": {
   "known_limit": 0,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 9,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  },
  "vibe-py": {
   "known_limit": 5,
   "parse_failed_files": 0,
   "unadjudicated_proposals": 14,
   "unresolved_function_labels": 0,
   "weak_labels": 0
  }
 },
 "outcomes": [
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "local-python-vulnerable",
   "origin": "in-tree-fixture",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "reviewed",
   "silent_fix": true,
   "slice": "local",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 12,
   "vuln_findings": 12,
   "vuln_matched": 12,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "local-javascript-vulnerable",
   "origin": "in-tree-fixture",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "reviewed",
   "silent_fix": true,
   "slice": "local",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 10,
   "vuln_findings": 10,
   "vuln_matched": 10,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "local-cpp-buffer",
   "origin": "in-tree-fixture",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "reviewed",
   "silent_fix": true,
   "slice": "local",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 6,
   "vuln_findings": 6,
   "vuln_matched": 6,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Internet-of-People/titania-os/commit/9b7805119938343fcac9dc929d8882f1d97cf14a",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "sven-cwe-078-os-system",
   "origin": "sven",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "github",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/google/mobly/commit/3862e8ba359040fbdd6e1a6d36e51d07cda8e1ee",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "sven-cwe-078-shell-true",
   "origin": "sven",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "github",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/russ-lewis/ttt_-_python_cgi/commit/6096f43fd4b2d91211eec4614b7960c0816900da",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "sven-cwe-089-execute-percent",
   "origin": "sven",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "github",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/pukkapies/urop2019/commit/3ca2e2c291d2d5fe262d20a8e0520bdfb622432b",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:modules/query_lastfm.py:CWE-89"
   ],
   "name": "sven-cwe-089-query-concat",
   "origin": "sven",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "github",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dromara/hutool/commit/8d7d0b7fb5ea4f7447b40131bffc1ec506a6528e",
   "cve": "CVE-2018-17297",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:cn/hutool/core/util/ZipUtil.java:CWE-22"
   ],
   "name": "hutool-cve-2018-17297",
   "origin": "cwe-bench-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "github",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5941",
   "cve": "CVE-2017-5941",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "node-serialize-cve-2017-5941",
   "origin": "nvd",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "github",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "python-unsafe-eval:testcode/BenchmarkTest00074.py:CWE-94"
   ],
   "name": "owasp-python-codeinj",
   "origin": "owasp-benchmark-python",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "owasp-python-deser",
   "origin": "owasp-benchmark-python",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "python",
   "leaks": [
    "python-shell-true:testcode/BenchmarkTest00165.py:58"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "python-shell-true:testcode/BenchmarkTest00165.py:CWE-78"
   ],
   "name": "owasp-python-cmdi",
   "origin": "owasp-benchmark-python",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "sast",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "python-sql-injection:testcode/BenchmarkTest00099.py:CWE-89"
   ],
   "name": "owasp-python-sqli",
   "origin": "owasp-benchmark-python",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "config_sink_weak_literal"
   ],
   "misses": [
    "python-weak-hash:testcode/BenchmarkTest00054.py:CWE-327"
   ],
   "name": "owasp-python-hash",
   "origin": "owasp-benchmark-python",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "owasp-java-cmdi",
   "origin": "owasp-benchmark-java",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:org/owasp/benchmark/testcode/BenchmarkTest00008.java:54:executeQuery"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "owasp-java-sqli",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "sast",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": "cross_artifact: OWASP labels this true via hashAlg1=MD5 in benchmark.properties, which is not in the vendored file",
   "language": "java",
   "leaks": [
    "overlay-coverage:org/owasp/benchmark/testcode/BenchmarkTest00003.java:100:response.write"
   ],
   "mechanisms": [
    "cross_artifact"
   ],
   "misses": [
    "java-weak-hash:org/owasp/benchmark/testcode/BenchmarkTest00003.java:CWE-327"
   ],
   "name": "owasp-java-hash",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "sast",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "juliet-c-cwe134-printf",
   "origin": "juliet-c",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-copy:CWE121_char_declare_cpy_01.c:16"
   ],
   "mechanisms": [
    "fixed_buffer_capacity"
   ],
   "misses": [],
   "name": "juliet-c-cwe121-strcpy",
   "origin": "juliet-c",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "sast",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "juliet-java-cwe78-exec",
   "origin": "juliet-java",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "sast",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3",
   "cve": "CVE-2014-0160",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/t1_lib.c:80"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2014-0160",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65",
   "cve": "CVE-2020-15667",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:modules/libmar/src/mar_read.c:46"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "firefox-cve-2020-15667",
   "origin": "mozilla-central",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449",
   "cve": "CVE-2019-5786",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "uaf"
   ],
   "misses": [
    "c-unsafe-memory-copy:third_party/blink/renderer/core/fileapi/file_reader_loader.cc:CWE-416"
   ],
   "name": "chromium-cve-2019-5786",
   "origin": "chromium",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4",
   "cve": "CVE-2020-1967",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:ssl/t1_lib.c:CWE-476"
   ],
   "name": "openssl-cve-2020-1967",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb",
   "cve": "CVE-2020-1971",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/x509/v3_genn.c:CWE-476"
   ],
   "name": "openssl-cve-2020-1971",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47",
   "cve": "CVE-2021-23840",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:60",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:78",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:97"
   ],
   "mechanisms": [
    "signed_size_operand"
   ],
   "misses": [
    "-:crypto/evp/evp_enc.c:CWE-190"
   ],
   "name": "openssl-cve-2021-23840",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46",
   "cve": "CVE-2021-3711",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/sm2/sm2_crypt.c:CWE-120"
   ],
   "name": "openssl-cve-2021-3711",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/x509/v3_utl.c:CWE-125"
   ],
   "name": "openssl-cve-2021-3712",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9",
   "cve": "CVE-2022-0778",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/bn/bn_sqrt.c:CWE-835"
   ],
   "name": "openssl-cve-2022-0778",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2",
   "cve": "CVE-2022-1292",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "unknown",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:tools/c_rehash.in:CWE-78"
   ],
   "name": "openssl-cve-2022-1292",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332",
   "cve": "CVE-2022-3602",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/punycode.c:81"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2022-3602",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6",
   "cve": "CVE-2022-3786",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/punycode.c:80"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2022-3786",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f",
   "cve": "CVE-2023-0286",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "type_confusion"
   ],
   "misses": [
    "-:crypto/x509/v3_genn.c:CWE-843"
   ],
   "name": "openssl-cve-2023-0286",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147",
   "cve": "CVE-2023-38545",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 5,
   "fix_leaks": 5,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:lib/socks.c:197",
    "c-unsafe-memory-copy:lib/socks.c:207",
    "c-unsafe-memory-copy:lib/socks.c:360",
    "c-unsafe-memory-copy:lib/socks.c:367",
    "c-unsafe-memory-copy:lib/socks.c:373"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "c-unsafe-memory-copy:lib/socks.c:CWE-122"
   ],
   "name": "curl-cve-2023-38545",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 5,
   "unadjudicated_vuln": 5,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 5,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51",
   "cve": "CVE-2022-2162",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "validation_strength"
   ],
   "misses": [
    "-:content/browser/file_system_access/file_system_chooser.cc:CWE-20"
   ],
   "name": "chromium-cve-2022-2162",
   "origin": "chromium",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb",
   "cve": "CVE-2025-69421",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/pkcs12/p12_decr.c:CWE-476"
   ],
   "name": "openssl-cve-2025-69421",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a",
   "cve": "CVE-2025-66199",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_alloc_size"
   ],
   "misses": [
    "-:ssl/statem/statem_lib.c:CWE-770"
   ],
   "name": "openssl-cve-2025-66199",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6",
   "cve": "BUG-2058173",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_alloc_size"
   ],
   "misses": [
    "-:modules/libmar/src/mar_read.c:CWE-770"
   ],
   "name": "firefox-bug-2058173",
   "origin": "mozilla-firefox/firefox",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af",
   "cve": "CVE-2026-18798",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/quic/quic_port.c:CWE-119"
   ],
   "name": "openssl-cve-2026-18798",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e",
   "cve": "CVE-2026-54874",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/record/rec_layer_d1.c:CWE-119"
   ],
   "name": "openssl-cve-2026-54874",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e",
   "cve": "CVE-2026-54874",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/record/ssl3_record.c:CWE-119"
   ],
   "name": "openssl-cve-2026-54874-dtls1_process_record",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40",
   "cve": "CVE-2026-54874",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/record/methods/dtls_meth.c:44"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/record/methods/dtls_meth.c:CWE-119"
   ],
   "name": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 2,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382",
   "cve": "CVE-2026-63072",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/cms/cms_kari.c:CWE-119"
   ],
   "name": "openssl-cve-2026-63072",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756",
   "cve": "CVE-2026-63072",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/cms/cms_kemri.c:CWE-119"
   ],
   "name": "openssl-cve-2026-63072-cms_kek_cipher",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4",
   "cve": "CVE-2026-63073",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/cmp/cmp_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2026-63073",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76",
   "cve": "CVE-2026-14457",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/t1_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2026-14457",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f",
   "cve": "CVE-2026-63074",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/cmp/cmp_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2026-63074",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393",
   "cve": "CVE-2026-63075",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/quic/quic_txp.c:CWE-119"
   ],
   "name": "openssl-cve-2026-63075-txp_pkt_commit",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42",
   "cve": "CVE-2026-75803",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_aes_ocb.c:CWE-119"
   ],
   "name": "openssl-cve-2026-75803",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42",
   "cve": "CVE-2026-75803",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_chacha20_poly1305.c:CWE-119"
   ],
   "name": "openssl-cve-2026-75803-chacha20_poly1305_cipher",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9",
   "cve": "CVE-2026-75803",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:CWE-119"
   ],
   "name": "openssl-cve-2026-75803-aes_gcm_siv_finish",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9",
   "cve": "CVE-2026-14456",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/quic/quic_port.c:CWE-119"
   ],
   "name": "openssl-cve-2026-14456-port_default_packet_hand",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba",
   "cve": "CVE-2026-14456",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/quic/quic_impl.c:CWE-119"
   ],
   "name": "openssl-cve-2026-14456-expect_quic_for_value",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f",
   "cve": "CVE-2026-45447",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "uaf"
   ],
   "misses": [
    "-:crypto/pkcs7/pk7_smime.c:CWE-416"
   ],
   "name": "openssl-cve-2026-45447",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721",
   "cve": "CVE-2026-45446",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:46",
    "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:63",
    "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:78"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:CWE-119"
   ],
   "name": "openssl-cve-2026-45446",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721",
   "cve": "CVE-2026-45446",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_aes_siv.c:CWE-119"
   ],
   "name": "openssl-cve-2026-45446-aes_siv_set_ctx_params",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399",
   "cve": "CVE-2026-45445",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_aes_ocb.c:CWE-119"
   ],
   "name": "openssl-cve-2026-45445",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea",
   "cve": "CVE-2026-42771",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/x509_vpm.c:CWE-119"
   ],
   "name": "openssl-cve-2026-42771",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a",
   "cve": "CVE-2026-42769",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/cmp/cmp_genm.c:CWE-476"
   ],
   "name": "openssl-cve-2026-42769",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369",
   "cve": "CVE-2026-42768",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/cms/cms_env.c:CWE-119"
   ],
   "name": "openssl-cve-2026-42768",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369",
   "cve": "CVE-2026-42768",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/pkcs7/pk7_doit.c:CWE-119"
   ],
   "name": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a",
   "cve": "CVE-2026-42766",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/cms/cms_pwri.c:CWE-476"
   ],
   "name": "openssl-cve-2026-42766",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6",
   "cve": "CVE-2026-42765",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/x509/x509_vfy.c:CWE-476"
   ],
   "name": "openssl-cve-2026-42765",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48",
   "cve": "CVE-2026-42764",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:ssl/quic/quic_port.c:CWE-476"
   ],
   "name": "openssl-cve-2026-42764",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9",
   "cve": "CVE-2026-35188",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/x509_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2026-35188",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c",
   "cve": "CVE-2026-34181",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/pkcs12/p12_mutl.c:CWE-119"
   ],
   "name": "openssl-cve-2026-34181",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82",
   "cve": "CVE-2026-9076",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/cms/cms_pwri.c:61"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2026-9076",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9",
   "cve": "CVE-2026-7383",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/asn1/a_mbstr.c:CWE-119"
   ],
   "name": "openssl-cve-2026-7383",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e",
   "cve": "CVE-2026-31790",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/kem/rsa_kem.c:CWE-119"
   ],
   "name": "openssl-cve-2026-31790",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482",
   "cve": "CVE-2026-31790",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "unknown",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/kem/rsa_kem.c.in:CWE-119"
   ],
   "name": "openssl-cve-2026-31790-rsasve_generate",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
   "cve": "CVE-2026-31789",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/o_str.c:CWE-119"
   ],
   "name": "openssl-cve-2026-31789",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
   "cve": "CVE-2026-28388",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/x509/x509_vfy.c:CWE-476"
   ],
   "name": "openssl-cve-2026-28388",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
   "cve": "CVE-2026-28389",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/cms/cms_rsa.c:CWE-476"
   ],
   "name": "openssl-cve-2026-28389",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
   "cve": "CVE-2026-28389",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/cms/cms_dh.c:CWE-476"
   ],
   "name": "openssl-cve-2026-28389-dh_cms_set_shared_info",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
   "cve": "CVE-2026-28389",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/cms/cms_ec.c:CWE-476"
   ],
   "name": "openssl-cve-2026-28389-ecdh_cms_set_shared_info",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34",
   "cve": "CVE-2026-2673",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 2,
   "fix_leaks": 2,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/t1_lib.c:102",
    "c-unsafe-memory-copy:ssl/t1_lib.c:167"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/t1_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2026-2673",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 2,
   "unadjudicated_vuln": 2,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5",
   "cve": "CVE-2025-69419",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/pkcs12/p12_utl.c:CWE-119"
   ],
   "name": "openssl-cve-2025-69419",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
   "cve": "CVE-2025-69418",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/modes/ocb128.c:57",
    "c-unsafe-memory-copy:crypto/modes/ocb128.c:68",
    "c-unsafe-memory-copy:crypto/modes/ocb128.c:93"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/modes/ocb128.c:CWE-119"
   ],
   "name": "openssl-cve-2025-69418",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4",
   "cve": "CVE-2025-66199",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2025-66199-tls13_process_compressed",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
   "cve": "CVE-2025-68160",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 5,
   "fix_leaks": 5,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:48",
    "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:54",
    "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:72",
    "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:111",
    "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:117"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2025-68160",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 5,
   "unadjudicated_vuln": 4,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 4,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61",
   "cve": "CVE-2025-15469",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:apps/dgst.c:CWE-119"
   ],
   "name": "openssl-cve-2025-15469",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e",
   "cve": "CVE-2025-15467",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/evp/evp_lib.c:26"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/evp/evp_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2025-15467",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206",
   "cve": "CVE-2025-11187",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/pkcs12/p12_mutl.c:CWE-119"
   ],
   "name": "openssl-cve-2025-11187",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b",
   "cve": "CVE-2025-9232",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/http/http_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2025-9232",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
   "cve": "CVE-2025-9230",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/cms/cms_pwri.c:59"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2025-9230",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7",
   "cve": "CVE-2024-12797",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2024-12797",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
   "cve": "CVE-2024-13176",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/ec/ec_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2024-13176-ec_field_inverse_mod_ord",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6",
   "cve": "CVE-2024-6119",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_utl.c:CWE-119"
   ],
   "name": "openssl-cve-2024-6119",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433",
   "cve": "CVE-2024-5535",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/extensions_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2024-5535",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7",
   "cve": "CVE-2024-5535",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/extensions_srvr.c:CWE-119"
   ],
   "name": "openssl-cve-2024-5535-tls_construct_stoc_next_",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba",
   "cve": "CVE-2024-5535",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/statem/extensions_clnt.c:57"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/extensions_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2024-5535-tls_parse_stoc_npn",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c",
   "cve": "CVE-2024-5535",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/ssl_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2024-5535-ssl_select_next_proto",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991",
   "cve": "CVE-2024-5535",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/quic/quic_tserver.c:CWE-119"
   ],
   "name": "openssl-cve-2024-5535-alpn_select_cb",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020",
   "cve": "CVE-2024-4741",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/record/rec_layer_s3.c:67"
   ],
   "mechanisms": [
    "uaf"
   ],
   "misses": [
    "-:ssl/record/rec_layer_s3.c:CWE-416"
   ],
   "name": "openssl-cve-2024-4741",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020",
   "cve": "CVE-2024-4741",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "uaf"
   ],
   "misses": [
    "-:ssl/record/ssl3_buffer.c:CWE-416"
   ],
   "name": "openssl-cve-2024-4741-ssl3_release_read_buffer",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d",
   "cve": "CVE-2024-4741",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/ssl_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2024-4741-ssl_free_buffers",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3",
   "cve": "CVE-2024-4741",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "uaf"
   ],
   "misses": [
    "-:ssl/record/methods/tls_common.c:CWE-416"
   ],
   "name": "openssl-cve-2024-4741-tls_release_read_buffer",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac",
   "cve": "CVE-2024-4741",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/record/methods/tls_common.c:CWE-119"
   ],
   "name": "openssl-cve-2024-4741-tls_free_buffers",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397",
   "cve": "CVE-2024-4603",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/dsa/dsa_check.c:CWE-119"
   ],
   "name": "openssl-cve-2024-4603",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
   "cve": "CVE-2024-2511",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/ssl_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2024-2511",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
   "cve": "CVE-2024-2511",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_srvr.c:CWE-119"
   ],
   "name": "openssl-cve-2024-2511-tls_construct_server_hel",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
   "cve": "CVE-2024-0727",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/pkcs12/p12_mutl.c:CWE-476"
   ],
   "name": "openssl-cve-2024-0727",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
   "cve": "CVE-2024-0727",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/pkcs7/pk7_mime.c:CWE-476"
   ],
   "name": "openssl-cve-2024-0727-smime_write_pkcs7",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d",
   "cve": "CVE-2023-5363",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 5,
   "fix_leaks": 5,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:173",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:181",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:332",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:333",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:345"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/evp/evp_enc.c:CWE-119"
   ],
   "name": "openssl-cve-2023-5363",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 5,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f",
   "cve": "CVE-2023-3817",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/dh/dh_check.c:CWE-119"
   ],
   "name": "openssl-cve-2023-3817-dh_check",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528",
   "cve": "CVE-2023-3446",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/dh/dh_check.c:CWE-119"
   ],
   "name": "openssl-cve-2023-3446",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598",
   "cve": "CVE-2023-2975",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_aes_siv.c:CWE-119"
   ],
   "name": "openssl-cve-2023-2975",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838",
   "cve": "CVE-2023-2650",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/objects/obj_dat.c:CWE-119"
   ],
   "name": "openssl-cve-2023-2650",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e",
   "cve": "CVE-2022-37454",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:providers/implementations/kdfs/hkdf.c:68"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2022-37454",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b",
   "cve": "CVE-2022-4304",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/bn/bn_asm.c:CWE-119"
   ],
   "name": "openssl-cve-2022-4304",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b",
   "cve": "CVE-2022-4304",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/bn/bn_blind.c:CWE-119"
   ],
   "name": "openssl-cve-2022-4304-bn_blinding_invert_ex",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b",
   "cve": "CVE-2022-4304",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/rsa/rsa_ossl.c:CWE-119"
   ],
   "name": "openssl-cve-2022-4304-rsa_blinding_invert",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95",
   "cve": "CVE-2023-0465",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/x509_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0465",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b",
   "cve": "CVE-2023-0464",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509v3/pcy_tree.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0464",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1",
   "cve": "CVE-2023-0464",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/pcy_tree.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0464-tree_init",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/record/methods/tls_common.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/ssl_sess.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-def_generate_session_id",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/extensions_srvr.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-tls_parse_ctos_renegotia",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 2,
   "fix_leaks": 2,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/statem/statem_lib.c:84",
    "c-unsafe-memory-copy:ssl/statem/statem_lib.c:88"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-tls_process_finished",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 2,
   "unadjudicated_vuln": 2,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847",
   "cve": "CVE-2023-0401",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/pkcs7/pk7_doit.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0401",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f",
   "cve": "CVE-2023-0286",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_genn.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0286-general_name_cmp",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a",
   "cve": "CVE-2023-0217",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/ffc/ffc_key_validate.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0217",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a",
   "cve": "CVE-2023-0216",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/pkcs7/pk7_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2023-0216",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118",
   "cve": "CVE-2022-4304",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:134"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/rsa/rsa_ossl.c:CWE-119"
   ],
   "name": "openssl-cve-2022-4304-rsa_ossl_private_decrypt",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7",
   "cve": "CVE-2020-25659",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:217"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/rsa/rsa_ossl.c:CWE-119"
   ],
   "name": "openssl-cve-2020-25659",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7",
   "cve": "CVE-2022-3996",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/pcy_map.c:CWE-119"
   ],
   "name": "openssl-cve-2022-3996",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6",
   "cve": "CVE-2022-3786",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/punycode.c:80"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [
    "-:crypto/punycode.c:CWE-119"
   ],
   "name": "openssl-cve-2022-3786-ossl_punycode_decode",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332",
   "cve": "CVE-2022-3602",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/punycode.c:81"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/punycode.c:CWE-119"
   ],
   "name": "openssl-cve-2022-3602-ossl_punycode_decode",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b",
   "cve": "CVE-2022-3358",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/evp/digest.c:CWE-476"
   ],
   "name": "openssl-cve-2022-3358",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b",
   "cve": "CVE-2022-3358",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:289",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:290",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:302"
   ],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/evp/evp_enc.c:CWE-476"
   ],
   "name": "openssl-cve-2022-3358-evp_cipher_init_internal",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa",
   "cve": "CVE-2022-2068",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "unknown",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:tools/c_rehash.in:CWE-119"
   ],
   "name": "openssl-cve-2022-2068-hash_dir",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca",
   "cve": "CVE-2022-29242",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2022-29242",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b",
   "cve": "CVE-2022-1434",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/ciphers/cipher_rc4_hmac_md5.c:CWE-119"
   ],
   "name": "openssl-cve-2022-1434",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a",
   "cve": "CVE-2022-1343",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/ocsp/ocsp_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2022-1343",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d",
   "cve": "CVE-2021-4044",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/x509_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2021-4044",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256",
   "cve": "CVE-2021-4044",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2021-4044-tls_post_process_server_",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010",
   "cve": "CVE-2021-3711",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:providers/implementations/asymciphers/sm2_enc.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3711-sm2_asym_decrypt",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/asn1/t_spki.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-netscape_spki_print",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_utl.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-append_ia5",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/cmp/cmp_hdr.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_ncons.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-ia5ncasecmp",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_pci.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-i2r_pci",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_san.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-general_name_print",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3",
   "cve": "CVE-2021-3712",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/v3_cpols.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3712-print_qualifiers",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46",
   "cve": "CVE-2021-3711",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/sm2/sm2_pmeth.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3711-pkey_sm2_decrypt",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 2,
   "fix_leaks": 2,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:ssl/s3_lib.c:39",
    "c-unsafe-memory-copy:ssl/s3_lib.c:42"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/s3_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-ssl_generate_master_secr",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 2,
   "unadjudicated_vuln": 2,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/ssl_lib.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/extensions.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-init_sig_algs_cert",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/extensions_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-tls_construct_ctos_early",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_clnt.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-tls_process_certificate_",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:ssl/statem/statem_srvr.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3449-tls_handle_alpn",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b",
   "cve": "CVE-2021-3449",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:ssl/statem/extensions.c:CWE-476"
   ],
   "name": "openssl-cve-2021-3449-init_sig_algs",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b",
   "cve": "CVE-2021-3450",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509/x509_vfy.c:CWE-119"
   ],
   "name": "openssl-cve-2021-3450",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1",
   "cve": "CVE-2021-23840",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:67",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:86",
    "c-unsafe-memory-copy:crypto/evp/evp_enc.c:105"
   ],
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "misses": [],
   "name": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf",
   "cve": "CVE-2021-23841",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:crypto/x509/x509_cmp.c:CWE-476"
   ],
   "name": "openssl-cve-2021-23841",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920",
   "cve": "CVE-2020-1971",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:crypto/x509v3/v3_genn.c:CWE-119"
   ],
   "name": "openssl-cve-2020-1971-general_name_cmp",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4",
   "cve": "CVE-2020-1967",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "misses": [
    "-:ssl/t1_lib.c:CWE-476"
   ],
   "name": "openssl-cve-2020-1967-tls1_check_sig_alg",
   "origin": "openssl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc",
   "cve": "CVE-2026-9080",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/multi_ev.c:CWE-119"
   ],
   "name": "curl-cve-2026-9080",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147",
   "cve": "CVE-2023-38545",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 5,
   "fix_leaks": 5,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:lib/socks.c:197",
    "c-unsafe-memory-copy:lib/socks.c:207",
    "c-unsafe-memory-copy:lib/socks.c:360",
    "c-unsafe-memory-copy:lib/socks.c:367",
    "c-unsafe-memory-copy:lib/socks.c:373"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/socks.c:CWE-119"
   ],
   "name": "curl-cve-2023-38545-do_socks5",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 5,
   "unadjudicated_vuln": 5,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 5,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f",
   "cve": "CVE-2022-32207",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/cookie.c:CWE-119"
   ],
   "name": "curl-cve-2022-32207",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2",
   "cve": "CVE-2022-32206",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/content_encoding.c:CWE-119"
   ],
   "name": "curl-cve-2022-32206",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09",
   "cve": "CVE-2022-32208",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/krb5.c:CWE-119"
   ],
   "name": "curl-cve-2022-32208",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
   "cve": "CVE-2022-27782",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/url.c:CWE-119"
   ],
   "name": "curl-cve-2022-27782-curl_init_userdefined",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
   "cve": "CVE-2022-27782",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/gtls.c:CWE-119"
   ],
   "name": "curl-cve-2022-27782-gtls_shutdown",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
   "cve": "CVE-2022-27782",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 2,
   "fix_leaks": 2,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-memory-copy:lib/vtls/nss.c:292",
    "c-unsafe-memory-copy:lib/vtls/nss.c:297"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/nss.c:CWE-119"
   ],
   "name": "curl-cve-2022-27782-nss_setup_connect",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 2,
   "unadjudicated_vuln": 2,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
   "cve": "CVE-2022-27782",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-copy:lib/vtls/openssl.c:365",
    "c-unsafe-memory-copy:lib/vtls/openssl.c:224",
    "c-unsafe-memory-copy:lib/vtls/openssl.c:231"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/openssl.c:CWE-119"
   ],
   "name": "curl-cve-2022-27782-ossl_connect_step1",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
   "cve": "CVE-2022-27782",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/vtls.c:CWE-119"
   ],
   "name": "curl-cve-2022-27782-curl_free_primary_ssl_co",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3",
   "cve": "CVE-2022-27778",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:src/tool_operate.c:CWE-119"
   ],
   "name": "curl-cve-2022-27778",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a",
   "cve": "CVE-2022-30115",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/hsts.c:CWE-119"
   ],
   "name": "curl-cve-2022-30115",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a",
   "cve": "CVE-2022-27780",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-copy:lib/urlapi.c:68"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/urlapi.c:CWE-119"
   ],
   "name": "curl-cve-2022-27780",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79",
   "cve": "CVE-2022-27774",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/transfer.c:CWE-119"
   ],
   "name": "curl-cve-2022-27774",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258",
   "cve": "CVE-2022-27776",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/http.c:CWE-119"
   ],
   "name": "curl-cve-2022-27776",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705",
   "cve": "CVE-2022-27775",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/conncache.c:CWE-119"
   ],
   "name": "curl-cve-2022-27775",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425",
   "cve": "CVE-2022-22576",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/url.c:CWE-119"
   ],
   "name": "curl-cve-2022-22576-conn_free",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
   "cve": "CVE-2021-22947",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/ftp.c:CWE-119"
   ],
   "name": "curl-cve-2021-22947",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
   "cve": "CVE-2021-22947",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/imap.c:CWE-119"
   ],
   "name": "curl-cve-2021-22947-imap_state_starttls_resp",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
   "cve": "CVE-2021-22947",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/pop3.c:CWE-119"
   ],
   "name": "curl-cve-2021-22947-pop3_state_starttls_resp",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
   "cve": "CVE-2021-22947",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/smtp.c:CWE-119"
   ],
   "name": "curl-cve-2021-22947-smtp_state_starttls_resp",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca",
   "cve": "CVE-2021-22946",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/ftp.c:CWE-119"
   ],
   "name": "curl-cve-2021-22946",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca",
   "cve": "CVE-2021-22946",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/imap.c:CWE-119"
   ],
   "name": "curl-cve-2021-22946-imap_state_capability_re",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca",
   "cve": "CVE-2021-22946",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/pop3.c:CWE-119"
   ],
   "name": "curl-cve-2021-22946-pop3_state_capa_resp",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49",
   "cve": "CVE-2021-22945",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/mqtt.c:CWE-119"
   ],
   "name": "curl-cve-2021-22945",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161",
   "cve": "CVE-2021-22924",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/url.c:CWE-119"
   ],
   "name": "curl-cve-2021-22924",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161",
   "cve": "CVE-2021-22924",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/nss.c:CWE-119"
   ],
   "name": "curl-cve-2021-22924-nss_do_connect",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161",
   "cve": "CVE-2021-22924",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/openssl.c:CWE-119"
   ],
   "name": "curl-cve-2021-22924-servercert",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a",
   "cve": "CVE-2021-22925",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/telnet.c:CWE-119"
   ],
   "name": "curl-cve-2021-22925",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479",
   "cve": "CVE-2021-22901",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "c-unsafe-copy:lib/vtls/openssl.c:364",
    "c-unsafe-memory-copy:lib/vtls/openssl.c:224",
    "c-unsafe-memory-copy:lib/vtls/openssl.c:231"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/openssl.c:CWE-119"
   ],
   "name": "curl-cve-2021-22901-ossl_connect_step1",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 3,
   "unadjudicated_vuln": 3,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde",
   "cve": "CVE-2021-22898",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/telnet.c:CWE-119"
   ],
   "name": "curl-cve-2021-22898",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844",
   "cve": "CVE-2021-22890",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/bearssl.c:CWE-119"
   ],
   "name": "curl-cve-2021-22890",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c",
   "cve": "CVE-2021-22876",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/transfer.c:CWE-119"
   ],
   "name": "curl-cve-2021-22876",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199",
   "cve": "CVE-2020-8286",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/vtls/openssl.c:CWE-119"
   ],
   "name": "curl-cve-2020-8286",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46",
   "cve": "CVE-2020-8284",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/url.c:CWE-119"
   ],
   "name": "curl-cve-2020-8284",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 1,
   "parse_failed_vuln": 1,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 1,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46",
   "cve": "CVE-2020-8284",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:src/tool_cfgable.c:CWE-119"
   ],
   "name": "curl-cve-2020-8284-config_init",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22",
   "cve": "CVE-2020-8231",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/multi.c:CWE-119"
   ],
   "name": "curl-cve-2020-8231-curl_multi_add_handle",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22",
   "cve": "CVE-2020-8231",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:lib/url.c:CWE-119"
   ],
   "name": "curl-cve-2020-8231-curl_open",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22",
   "cve": "CVE-2020-8177",
   "detected_vuln": false,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "c_cpp",
   "leaks": [
    "overlay-coverage:src/tool_cb_hdr.c:180:printf"
   ],
   "mechanisms": [
    "other"
   ],
   "misses": [
    "-:src/tool_cb_hdr.c:CWE-119"
   ],
   "name": "curl-cve-2020-8177",
   "origin": "curl",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application/blob/a961308c02d1fb462b192681c336b0739e432da7/core/views.py#L211",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:core/views.py:CWE-78"
   ],
   "name": "damn-vulnerable-graphql-application-views-mutate",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application/blob/a961308c02d1fb462b192681c336b0739e432da7/core/views.py#L320",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "damn-vulnerable-graphql-application-views-resolve-pastes",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application/blob/a961308c02d1fb462b192681c336b0739e432da7/core/views.py#L345",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:core/views.py:CWE-78"
   ],
   "name": "damn-vulnerable-graphql-application-views-resolve-system-dia",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Contrast-Security-OSS/DjanGoat/blob/082c88bfefced508ae083b92b459c808f95e905e/app/models/Analytics/analytics.py#L57",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "djangoat-analytics-hits-by-ip",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Contrast-Security-OSS/DjanGoat/blob/082c88bfefced508ae083b92b459c808f95e905e/app/views/password_resets/views.py#L84",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "djangoat-views-reset-password",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Contrast-Security-OSS/DjanGoat/blob/082c88bfefced508ae083b92b459c808f95e905e/app/views/users/views.py#L74",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "djangoat-views-user-view",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 5,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/sgabe/DSVPWA/blob/a06abb306ed3699bb2f073e3f41d3d9c57012819/dsvpwa/attacks.py#L39",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "dsvpwa-attacks-run",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/sgabe/DSVPWA/blob/a06abb306ed3699bb2f073e3f41d3d9c57012819/dsvpwa.py#L37",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:dsvpwa.py:CWE-326"
   ],
   "name": "dsvpwa-dsvpwa-main",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/sgabe/DSVPWA/blob/a06abb306ed3699bb2f073e3f41d3d9c57012819/dsvpwa/handlers.py#L183",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "dsvpwa-handlers-do-bdr",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/stamparm/DSVW/blob/7d40f4b7939c901610ed9b85724552d60e7d63fa/dsvw.py#L30",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": "identical_twin",
   "language": "python",
   "leaks": [
    "python-path-traversal:dsvw.py:26"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:dsvw.py:CWE-89"
   ],
   "name": "dsvw-dsvw-do-get",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": false,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 7,
   "unadjudicated_vuln": 7,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/anxolerd/dvpwa/blob/a1d8f89fac2e57093189853c6527c2b01fc1d9c1/sqli/app.py#L35",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:sqli/app.py:CWE-16"
   ],
   "name": "dvpwa-app-init",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/anxolerd/dvpwa/blob/a1d8f89fac2e57093189853c6527c2b01fc1d9c1/sqli/middlewares.py#L20",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:sqli/middlewares.py:CWE-1004"
   ],
   "name": "dvpwa-middlewares-session-middleware",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/anxolerd/dvpwa/blob/a1d8f89fac2e57093189853c6527c2b01fc1d9c1/sqli/dao/student.py#L42",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "dvpwa-student-create",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/manuelz120/extremely-vulnerable-flask-app/blob/d5d8875559e21222bbbaadb7b9f0af592c6eb7fa/routes/account.py#L118",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:routes/account.py:CWE-502"
   ],
   "name": "extremely-vulnerable-flask-app-account-before-request",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/manuelz120/extremely-vulnerable-flask-app/blob/d5d8875559e21222bbbaadb7b9f0af592c6eb7fa/routes/account.py#L33",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:routes/account.py:CWE-89"
   ],
   "name": "extremely-vulnerable-flask-app-account-search",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/manuelz120/extremely-vulnerable-flask-app/blob/d5d8875559e21222bbbaadb7b9f0af592c6eb7fa/routes/signup.py#L15",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "extremely-vulnerable-flask-app-signup-validate-token",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/kolega-ai/realvuln-python-insecure-app/blob/80b894a2f754590747a31c92b2088be086421953/app/main.py#L41",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": "identical_twin",
   "language": "python",
   "leaks": [
    "overlay-coverage:app/main.py:25:outbound.request"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:app/main.py:CWE-1336"
   ],
   "name": "python-insecure-app-main-try-hack-me",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": false,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/TheWation/PythonSSTI/blob/76339c27d5a870c0a81bad6aee5f9bd516592145/main.py#L14",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": "identical_twin",
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:main.py:CWE-79"
   ],
   "name": "pythonssti-main-read-root",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/anotherik/ThreatByte/blob/c4db46f72586c4ecb65859051ea037018dbf0e5e/server/api/v1/api_v1.py#L223",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "missing_auth_guard"
   ],
   "misses": [
    "-:server/api/v1/api_v1.py:CWE-862"
   ],
   "name": "threatbyte-api-v1-delete",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/anotherik/ThreatByte/blob/c4db46f72586c4ecb65859051ea037018dbf0e5e/server/api/v1/api_v1.py#L154",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "missing_auth_guard"
   ],
   "misses": [
    "-:server/api/v1/api_v1.py:CWE-639"
   ],
   "name": "threatbyte-api-v1-get",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/anotherik/ThreatByte/blob/c4db46f72586c4ecb65859051ea037018dbf0e5e/server/routes.py#L137",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "threatbyte-routes-dashboard",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/erev0s/VAmPI/blob/1713b54b601ad29582581eeda4b31fceb1319874/api_views/books.py#L51",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": "identical_twin",
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "missing_auth_guard"
   ],
   "misses": [
    "-:api_views/books.py:CWE-639"
   ],
   "name": "vampi-books-get-by-title",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/erev0s/VAmPI/blob/1713b54b601ad29582581eeda4b31fceb1319874/models/user_model.py#L72",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vampi-user-model-get-user",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/erev0s/VAmPI/blob/1713b54b601ad29582581eeda4b31fceb1319874/api_views/users.py#L187",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "missing_auth_guard"
   ],
   "misses": [
    "-:api_views/users.py:CWE-639"
   ],
   "name": "vampi-users-update-password",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/naryal2580/vfapi/blob/f36f177e1a32aa49272f4eb52f8be0af3e8f6bc3/main.py#L231",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:main.py:CWE-89"
   ],
   "name": "vfapi-main-delete-user",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/naryal2580/vfapi/blob/f36f177e1a32aa49272f4eb52f8be0af3e8f6bc3/main.py#L188",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:main.py:CWE-89"
   ],
   "name": "vfapi-main-put-user",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/naryal2580/vfapi/blob/f36f177e1a32aa49272f4eb52f8be0af3e8f6bc3/main.py#L182",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:main.py:CWE-89"
   ],
   "name": "vfapi-main-sql-return-users-from-username",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/LinuxUser255/Vulnerable_Python_Apps/blob/6336c77e6db523a5df34c4b628dff4159110797a/Insecure_Frameworks/bad_mvc.py#L37",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:Insecure_Frameworks/bad_mvc.py:CWE-79"
   ],
   "name": "vulnerable-python-apps-bad-mvc-do-get",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/LinuxUser255/Vulnerable_Python_Apps/blob/6336c77e6db523a5df34c4b628dff4159110797a/Directory_Traversal/Dir_Traversal.py#L22",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:Directory_Traversal/Dir_Traversal.py:CWE-22"
   ],
   "name": "vulnerable-python-apps-dir-traversal-do-get",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/cmdi.py#L6",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vulnpy-cmdi-do-os-system",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/cmdi.py#L10",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vulnpy-cmdi-do-subprocess-popen",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/deserialization.py#L8",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": "identical_twin",
   "language": "python",
   "leaks": [
    "python-unsafe-deserialization:src/vulnpy/trigger/deserialization.py:15"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vulnpy-deserialization-do-pickle-load",
   "origin": "real-vuln-benchmark",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": false,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/fportantier/vulpy/blob/5249cc8b05a1c37f6b2f757b1cf16a509c327122/bad/libuser.py#L25",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vulpy-libuser-create",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/fportantier/vulpy/blob/5249cc8b05a1c37f6b2f757b1cf16a509c327122/bad/libuser.py#L12",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vulpy-libuser-login",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/fportantier/vulpy/blob/5249cc8b05a1c37f6b2f757b1cf16a509c327122/bad/libuser.py#L53",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "vulpy-libuser-password-change",
   "origin": "real-vuln-benchmark",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "seeded",
   "silent_fix": true,
   "slice": "vibe-py",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/simonh1000/angular-http-server/commit/8bafc9577161469f5dea01e0b98ea9c525d063e9",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:angular-http-server.js:CWE-22"
   ],
   "name": "angular-http-server-1-0-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/vincentmorneau/apex-publish-static-files/commit/2209af8f2b65c24aa55ab757e0e05b958c16f063",
   "cve": "CVE-2018-16462",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage",
    "promote"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "overlay-coverage:index.js:22:prototype.merge"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "apex-publish-static-files-2-0-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/nfriedly/node-bestzip/commit/45d4a901478c6a8f396c8b959dd6cf8fd3f955b6",
   "cve": "CVE-2020-7730",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "bestzip-2-1-6",
   "origin": "secbench.js",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/kylefarris/clamscan/commit/5f557c970817fe8c578ec3f7ad3bcbcef4cf5538",
   "cve": "CVE-2020-7613",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:index.js:CWE-78"
   ],
   "name": "clamscan-1-2-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/iximiuz/node-diskusage-ng/commit/48e7e093486b528f0c81ec699573e0e4a431b8d3",
   "cve": "CVE-2020-7631",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "diskusage-ng-0-2-6",
   "origin": "secbench.js",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/skoranga/node-dns-sync/commit/d9abaae384b198db1095735ad9c1c73d7b890a0d",
   "cve": "CVE-2014-9682",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "js-command-exec:lib/dns-sync.js:28"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "dns-sync-0-1-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/jarofghosts/glance/commit/8cfd88e44ebd3f07e3a2eaf376a3e758b6c4ca19",
   "cve": "CVE-2018-3715",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:index.js:CWE-22"
   ],
   "name": "glance-3-0-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/handsontable/formula-parser/commit/396b089738d4bf30eb570a4fe6a188affa95cd5e",
   "cve": "CVE-2020-6836",
   "detected_vuln": false,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:src/grammar-parser/grammar-parser.js:CWE-78"
   ],
   "name": "hot-formula-parser-3-0-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/jas-/node-libnmap/commit/c235b24b0342e12a5dbf502f89daabe95883b6c8",
   "cve": "CVE-2018-16461",
   "detected_vuln": false,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "overlay-coverage:lib/classes/tools.js:26:prototype.merge"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:lib/classes/tools.js:CWE-78"
   ],
   "name": "libnmap-0-4-11",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/roest01/node-pdf-image/commit/54679496a89738443917608c2bbe2f6e5dd20e83",
   "cve": "CVE-2018-3757",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "pdf-image-1-0-5",
   "origin": "secbench.js",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 2,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/soyuka/pidusage/commit/b70eca15f7ca7f1b82a15f8a5d4bb48737f5a89d",
   "cve": "CVE-2017-16034",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage",
    "promote"
   ],
   "fix_findings": 3,
   "fix_leaks": 3,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "js-command-exec:lib/stats.js:119",
    "overlay-coverage:lib/stats.js:29:path.open",
    "overlay-coverage:lib/stats.js:61:path.open"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "pidusage-1-0-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 3,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/rrainn/PortProcesses/commit/86811216c9b97b01b5722f879f8c88a7aa4214e1",
   "cve": "CVE-2021-23348",
   "detected_vuln": true,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "js-command-exec:index.js:21"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "portprocesses-1-0-4",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/ChristoPy/serve-here.js/commit/cefb51d03290b6a88dd13143ab2de31b8cf57c39",
   "cve": "CVE-2019-5444",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:source/response.js:CWE-22"
   ],
   "name": "serve-here-js-1-1-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/browserify/static-eval/commit/32f8efd072625e267aa7237d2daff35738c50d2a",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:index.js:CWE-94"
   ],
   "name": "static-eval-1-1-1",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/thenables/thenify/commit/0d94a24eb933bc835d568f3009f4d269c4c4c17a",
   "cve": "CVE-2020-7677",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "thenify-3-3-0",
   "origin": "secbench.js",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/jashkenas/underscore/commit/4c73526d43838ad6ab43a6134728776632adeb66",
   "cve": "CVE-2021-23358",
   "detected_vuln": false,
   "detection_kinds": [
    "inventory"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "js-function-constructor:modules/template.js:63"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:modules/template.js:CWE-94"
   ],
   "name": "underscore-1-13-0-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "train",
   "unadjudicated_fixed": 1,
   "unadjudicated_vuln": 1,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/vvo/node-whereis/commit/0f64e3780235004fb6e43bfd153ea3e0e210ee2b",
   "cve": "CVE-2018-3772",
   "detected_vuln": true,
   "detection_kinds": [
    "promote"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "js-command-exec:index.js:23"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "whereis-0-4-0",
   "origin": "secbench.js",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "human",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "vfc-js",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 4,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Anas329796/Anastasios/commit/14ec1ac50f9e4e255d875236d30129c6207401d4",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:extensions/browser/src/browser/pw-session.ts:CWE-918"
   ],
   "name": "anastasios-pw-session-14ec1a",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/P1R4N351/astroclaw/commit/1553a8adf123913cf7f1f1c75be4c4e5cd6c796b",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:extensions/browser/src/browser/pw-session.ts:CWE-918"
   ],
   "name": "astroclaw-pw-session-1553a8",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Cap-go/capgo.app/commit/4dadd2580d02213d227a331eee0232aa59859b59",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:supabase/functions/_backend/utils/hono.ts:CWE-16"
   ],
   "name": "capgo-app-hono-4dadd2",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/jfut/dnf-plugin-anyrepo/commit/26d19aeb8884f244e34ccfdc4f49f07055adc4d0",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:dnf_plugin_anyrepo/config.py:CWE-22"
   ],
   "name": "dnf-plugin-anyrepo-config-26d19a",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/jardimdesoftware/edutrace/commit/ee7ba25fb23ea89cc1b67549cb5e32c8ead92739",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:front/src/app/editar-anamnese/page.tsx:CWE-1321"
   ],
   "name": "edutrace-page-ee7ba2",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dayflower/etude-lexical-markdown/commit/c61a8bf78fe20d6ae0eab2e4b8b02004508525ed",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:src/config/editorConfig.ts:CWE-1321"
   ],
   "name": "etude-lexical-markdown-editorconfig-c61a8b",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dayflower/etude-lexical-markdown/commit/db4f54b1ab80ad596de6425e84f90aa781c49999",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:src/config/editorConfig.ts:CWE-1321"
   ],
   "name": "etude-lexical-markdown-editorconfig-db4f54",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/amitknigam84/lensops/commit/fe49109aedfe21dea4d24d4d9f2fa3f1ecfb6c84",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": "client_side_caller",
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "missing_auth_guard"
   ],
   "misses": [
    "-:components/KubernetesManagement.tsx:CWE-862"
   ],
   "name": "lensops-kubernetesmanagement-fe4910",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/navaneethbv/market-cap/commit/4f8ae9be5519ced5a975f1190e3e4bc43f84e4d6",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 2,
   "fix_leaks": 2,
   "known_limit": null,
   "language": "typescript",
   "leaks": [
    "overlay-coverage:app/auth/confirm/route.ts:26:redirect",
    "overlay-coverage:app/auth/confirm/route.ts:30:redirect"
   ],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [],
   "name": "market-cap-route-4f8ae9",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 1.0,
   "review_tier": "title",
   "silent_fix": false,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 2,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/alexshao3/melodix/commit/089931ef71ea1e5b7586520baf1a5498e2f05b13",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:apps/miniapp/src/components/PlayerProvider.tsx:CWE-16"
   ],
   "name": "melodix-playerprovider-089931",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/handielson/Mercado-do-vale-news/commit/9b5fcf2dae41e56f5f97952266f2d6ba59598598",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:services/catalogMetadataService.ts:CWE-16"
   ],
   "name": "mercado-do-vale-news-catalogmetadataservice-9b5fcf",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/andrebubniak/money-track/commit/4d4a5b063278c8b6697c3faae133d7c39fcd01c0",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:src/lib/category-icons.ts:CWE-1321"
   ],
   "name": "money-track-category-icons-4d4a5b",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/DavideCarvalho/nestjs-filter/commit/aa0e600d05997ea3d77538ea1c2db427c439f2e8",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:packages/core/src/input/normalizer.ts:CWE-1321"
   ],
   "name": "nestjs-filter-normalizer-aa0e60",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Sachin-Salgar/NEW_ERP_FINAL/commit/6e9644c81ce3fb356669157182a5ef09a70c4b59",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:src/presentation/http/app.ts:CWE-16"
   ],
   "name": "new-erp-final-app-6e9644",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Irnhakim/nimestream/commit/d17f535bf3012041b056ff3aa991ff6cfa198e43",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:app/api/img/route.js:CWE-918"
   ],
   "name": "nimestream-route-d17f53",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/HHHHHejia/openniw/commit/0fc94733f6ca3c6b129a0a8e6d7b3acce19d5a10",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "identity_from_request_body"
   ],
   "misses": [
    "-:backend/app/routers/jobs.py:CWE-639"
   ],
   "name": "openniw-jobs-0fc947",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/ziyuzuo/openniw/commit/b74de31b0a5f37e4e929ba6aa74dbe0f5e6d9a68",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "identity_from_request_body"
   ],
   "misses": [
    "-:backend/app/routers/jobs.py:CWE-639"
   ],
   "name": "openniw-jobs-b74de3",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/ZUENS2020/overleaf-with-claude/commit/3980b9e5806defb63e45ae2696e6c1899f3a8431",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "identity_from_request_body"
   ],
   "misses": [
    "-:services/web/app/src/Features/Exports/ExportsController.mjs:CWE-639"
   ],
   "name": "overleaf-with-claude-exportscontroller-3980b9",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/dayflower/popmark/commit/e5ac407cef37c37178d440541ede301c838640fb",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:src/lexical-markdown/config/editorConfig.ts:CWE-1321"
   ],
   "name": "popmark-editorconfig-e5ac40",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/DevilsDev/rag-pipeline-utils/commit/76e5f0a94d6803d0e463d26a61cedb7da90857a7",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "overlay-coverage:src/cli/handlers/config-handler.js:15:path.open"
   ],
   "mechanisms": [
    "prototype_pollution"
   ],
   "misses": [
    "-:src/cli/handlers/config-handler.js:CWE-1321"
   ],
   "name": "rag-pipeline-utils-config-handler-76e5f0",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": false,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/agents-repo/registry-proxy/commit/426847899eb2ee94ae4e5a3aacc50423e36d2dc8",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "javascript",
   "leaks": [
    "overlay-coverage:src/worker.js:30:prototype.merge"
   ],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:src/worker.js:CWE-16"
   ],
   "name": "registry-proxy-worker-426847",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": false,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/bigfivefoods/supplieradvisor-mvp/commit/387bcf40e984a2ee1832ab7beabf0284c5b627d8",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "identity_from_request_body"
   ],
   "misses": [
    "-:app/api/customers/claims/route.ts:CWE-639"
   ],
   "name": "supplieradvisor-mvp-route-387bcf",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/bigfivefoods/supplieradvisor-mvp/commit/a69e8f27c0f4d402573d16f0612b51155bbc46e1",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "identity_from_request_body"
   ],
   "misses": [
    "-:app/api/customers/opportunities/route.ts:CWE-639"
   ],
   "name": "supplieradvisor-mvp-route-a69e8f",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/D-sorganization/Tools/commit/a96bc0502a3dcdac303e4f0152508886e5c35c0a",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:src/shared/python/ai/tools/cli_tools.py:CWE-78"
   ],
   "name": "tools-cli-tools-a96bc0",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/trackly-app/trackly-cli/commit/1c1aed89b07edb04051830c8f086e02b65e961c6",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "javascript",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:lib/path-diagnostics.js:CWE-22"
   ],
   "name": "trackly-cli-path-diagnostics-1c1aed",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/D-sorganization/UpstreamDrift/commit/c3a0787080489b30e2ed0abfac03b51e45da184b",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "path_join_user_input"
   ],
   "misses": [
    "-:src/api/local_server.py:CWE-22"
   ],
   "name": "upstreamdrift-local-server-c3a078",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/Ahkeratmehilaiset/waggledance-swarm/commit/9a454843aa35332ff2eb3106023eee0c4b5e444b",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "python",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:waggledance/core/v3_13_0/ssrf_host_guard.py:CWE-918"
   ],
   "name": "waggledance-swarm-ssrf-host-guard-9a4548",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/G4brym/workers-research/commit/209444eb61cc564c2d6b43267256f85fe3e5e30e",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "source_reaches_sink"
   ],
   "misses": [
    "-:src/utils.ts:CWE-89"
   ],
   "name": "workers-research-utils-209444",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "https://github.com/zoonk/zoonk/commit/bfbf670ccb41d63c407d32c51bd26e626a174f31",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "typescript",
   "leaks": [],
   "mechanisms": [
    "permissive_default"
   ],
   "misses": [
    "-:packages/utils/src/origin.ts:CWE-16"
   ],
   "name": "zoonk-origin-bfbf67",
   "origin": "github-agent-trailer",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "agent",
   "recall": 0.0,
   "review_tier": "title",
   "silent_fix": true,
   "slice": "agent-vfc",
   "split": "train",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00013.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00013",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00014.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00014",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00030.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00030",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00036.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00036",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00041.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00041.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00041",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00144.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00144",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00145.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00145",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00146.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00146",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00148.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00148",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00149.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00149",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00150.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00150",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00152.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00152.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00152",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00153.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00153",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00154.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00154.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00154",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00155.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00155",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00156.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00156",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00157",
   "origin": "owasp-benchmark-java",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00276",
   "origin": "owasp-benchmark-java",
   "pair_correct": true,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00279.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00279.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00279",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00280.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00280.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00280",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00284.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00284",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00287.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00287",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00290.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00290",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00291.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00291",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": true,
   "detection_kinds": [
    "coverage"
   ],
   "fix_findings": 1,
   "fix_leaks": 1,
   "known_limit": null,
   "language": "java",
   "leaks": [
    "overlay-coverage:testcode/BenchmarkTest00292.java:56:response.write"
   ],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [],
   "name": "owasp-xss-benchmarktest00292",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 1.0,
   "review_tier": "advisory",
   "silent_fix": false,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 1,
   "vuln_matched": 1,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00301.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00301",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00375.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00375",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00376.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00376",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00378.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00378",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00380.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00380",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00382.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00382",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00383.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00383",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00384.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00384",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00385.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00385",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00387.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00387",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00388.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00388",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00390.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00390",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00392.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00392",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00395.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00395",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  },
  {
   "commit_url": "",
   "cve": "",
   "detected_vuln": false,
   "detection_kinds": [],
   "fix_findings": 0,
   "fix_leaks": 0,
   "known_limit": null,
   "language": "java",
   "leaks": [],
   "mechanisms": [
    "container_taint"
   ],
   "misses": [
    "-:testcode/BenchmarkTest00467.java:CWE-79"
   ],
   "name": "owasp-xss-benchmarktest00467",
   "origin": "owasp-benchmark-java",
   "pair_correct": false,
   "parse_failed_fixed": 0,
   "parse_failed_vuln": 0,
   "provenance": "synthetic",
   "recall": 0.0,
   "review_tier": "advisory",
   "silent_fix": true,
   "slice": "owasp",
   "split": "holdout",
   "unadjudicated_fixed": 0,
   "unadjudicated_vuln": 0,
   "unresolved_labels": 0,
   "unscorable": null,
   "vuln_expected": 1,
   "vuln_findings": 0,
   "vuln_matched": 0,
   "weak_labels": 0
  }
 ],
 "overall": {
  "detected_vuln": 57,
  "labeled_expected": 342,
  "labeled_fix_leaks": 98,
  "labeled_matched": 82,
  "labeled_recall": 0.23976608187134502,
  "pair_correct": 32,
  "pair_pass_rate": 0.10094637223974763,
  "pairs": 317,
  "silent_fix": 256,
  "specificity": 0.807570977917981,
  "vuln_recall": 0.17981072555205047,
  "youden": -0.012618296529968487
 },
 "per_mechanism": {
  "config_sink_weak_literal": {
   "detected_vuln": 0,
   "labeled_expected": 1,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 1,
   "silent_fix": 1,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  },
  "container_taint": {
   "detected_vuln": 9,
   "labeled_expected": 43,
   "labeled_fix_leaks": 13,
   "labeled_matched": 9,
   "labeled_recall": 0.20930232558139536,
   "pair_correct": 2,
   "pair_pass_rate": 0.046511627906976744,
   "pairs": 43,
   "silent_fix": 30,
   "specificity": 0.6976744186046512,
   "vuln_recall": 0.20930232558139536,
   "youden": -0.09302325581395346
  },
  "cross_artifact": {
   "detected_vuln": 0,
   "labeled_expected": 1,
   "labeled_fix_leaks": 1,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 1,
   "silent_fix": 0,
   "specificity": 0.0,
   "vuln_recall": 0.0,
   "youden": -1.0
  },
  "fixed_buffer_capacity": {
   "detected_vuln": 1,
   "labeled_expected": 1,
   "labeled_fix_leaks": 1,
   "labeled_matched": 1,
   "labeled_recall": 1.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 1,
   "silent_fix": 0,
   "specificity": 0.0,
   "vuln_recall": 1.0,
   "youden": 0.0
  },
  "identity_from_request_body": {
   "detected_vuln": 0,
   "labeled_expected": 5,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 5,
   "silent_fix": 5,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  },
  "missing_auth_guard": {
   "detected_vuln": 0,
   "labeled_expected": 5,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 5,
   "silent_fix": 5,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  },
  "null_deref_unguarded": {
   "detected_vuln": 0,
   "labeled_expected": 18,
   "labeled_fix_leaks": 3,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 18,
   "silent_fix": 17,
   "specificity": 0.9444444444444444,
   "vuln_recall": 0.0,
   "youden": -0.05555555555555558
  },
  "other": {
   "detected_vuln": 0,
   "labeled_expected": 130,
   "labeled_fix_leaks": 38,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 130,
   "silent_fix": 112,
   "specificity": 0.8615384615384616,
   "vuln_recall": 0.0,
   "youden": -0.1384615384615384
  },
  "path_join_user_input": {
   "detected_vuln": 0,
   "labeled_expected": 8,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 8,
   "silent_fix": 8,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  },
  "permissive_default": {
   "detected_vuln": 0,
   "labeled_expected": 9,
   "labeled_fix_leaks": 1,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 9,
   "silent_fix": 8,
   "specificity": 0.8888888888888888,
   "vuln_recall": 0.0,
   "youden": -0.11111111111111116
  },
  "prototype_pollution": {
   "detected_vuln": 0,
   "labeled_expected": 7,
   "labeled_fix_leaks": 1,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 7,
   "silent_fix": 6,
   "specificity": 0.8571428571428571,
   "vuln_recall": 0.0,
   "youden": -0.1428571428571429
  },
  "signed_size_operand": {
   "detected_vuln": 0,
   "labeled_expected": 1,
   "labeled_fix_leaks": 3,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 1,
   "silent_fix": 0,
   "specificity": 0.0,
   "vuln_recall": 0.0,
   "youden": -1.0
  },
  "source_reaches_sink": {
   "detected_vuln": 38,
   "labeled_expected": 87,
   "labeled_fix_leaks": 15,
   "labeled_matched": 63,
   "labeled_recall": 0.7241379310344828,
   "pair_correct": 30,
   "pair_pass_rate": 0.4838709677419355,
   "pairs": 62,
   "silent_fix": 50,
   "specificity": 0.8064516129032258,
   "vuln_recall": 0.6129032258064516,
   "youden": 0.4193548387096774
  },
  "type_confusion": {
   "detected_vuln": 0,
   "labeled_expected": 1,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 1,
   "silent_fix": 1,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  },
  "uaf": {
   "detected_vuln": 0,
   "labeled_expected": 5,
   "labeled_fix_leaks": 1,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 5,
   "silent_fix": 4,
   "specificity": 0.8,
   "vuln_recall": 0.0,
   "youden": -0.19999999999999996
  },
  "unchecked_alloc_size": {
   "detected_vuln": 0,
   "labeled_expected": 2,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 2,
   "silent_fix": 2,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  },
  "unchecked_length_copy": {
   "detected_vuln": 9,
   "labeled_expected": 17,
   "labeled_fix_leaks": 21,
   "labeled_matched": 9,
   "labeled_recall": 0.5294117647058824,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 17,
   "silent_fix": 6,
   "specificity": 0.35294117647058826,
   "vuln_recall": 0.5294117647058824,
   "youden": -0.11764705882352933
  },
  "validation_strength": {
   "detected_vuln": 0,
   "labeled_expected": 1,
   "labeled_fix_leaks": 0,
   "labeled_matched": 0,
   "labeled_recall": 0.0,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 1,
   "silent_fix": 1,
   "specificity": 1.0,
   "vuln_recall": 0.0,
   "youden": 0.0
  }
 },
 "per_profile": {
  "agent": {
   "detected_vuln": 1,
   "labeled_expected": 29,
   "labeled_fix_leaks": 4,
   "labeled_matched": 1,
   "labeled_recall": 0.034482758620689655,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 29,
   "silent_fix": 26,
   "specificity": 0.896551724137931,
   "vuln_recall": 0.034482758620689655,
   "youden": -0.0689655172413793
  },
  "human": {
   "detected_vuln": 41,
   "labeled_expected": 262,
   "labeled_fix_leaks": 78,
   "labeled_matched": 66,
   "labeled_recall": 0.25190839694656486,
   "pair_correct": 26,
   "pair_pass_rate": 0.10970464135021098,
   "pairs": 237,
   "silent_fix": 195,
   "specificity": 0.8227848101265823,
   "vuln_recall": 0.1729957805907173,
   "youden": -0.00421940928270037
  },
  "synthetic": {
   "detected_vuln": 15,
   "labeled_expected": 51,
   "labeled_fix_leaks": 16,
   "labeled_matched": 15,
   "labeled_recall": 0.29411764705882354,
   "pair_correct": 6,
   "pair_pass_rate": 0.11764705882352941,
   "pairs": 51,
   "silent_fix": 35,
   "specificity": 0.6862745098039216,
   "vuln_recall": 0.29411764705882354,
   "youden": -0.019607843137254888
  }
 },
 "per_slice": {
  "agent-vfc": {
   "detected_vuln": 1,
   "labeled_expected": 29,
   "labeled_fix_leaks": 4,
   "labeled_matched": 1,
   "labeled_recall": 0.034482758620689655,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 29,
   "silent_fix": 26,
   "specificity": 0.896551724137931,
   "vuln_recall": 0.034482758620689655,
   "youden": -0.0689655172413793
  },
  "github": {
   "detected_vuln": 4,
   "labeled_expected": 6,
   "labeled_fix_leaks": 0,
   "labeled_matched": 4,
   "labeled_recall": 0.6666666666666666,
   "pair_correct": 4,
   "pair_pass_rate": 0.6666666666666666,
   "pairs": 6,
   "silent_fix": 6,
   "specificity": 1.0,
   "vuln_recall": 0.6666666666666666,
   "youden": 0.6666666666666666
  },
  "local": {
   "detected_vuln": 3,
   "labeled_expected": 28,
   "labeled_fix_leaks": 0,
   "labeled_matched": 28,
   "labeled_recall": 1.0,
   "pair_correct": 3,
   "pair_pass_rate": 1.0,
   "pairs": 3,
   "silent_fix": 3,
   "specificity": 1.0,
   "vuln_recall": 1.0,
   "youden": 1.0
  },
  "owasp": {
   "detected_vuln": 9,
   "labeled_expected": 40,
   "labeled_fix_leaks": 12,
   "labeled_matched": 9,
   "labeled_recall": 0.225,
   "pair_correct": 2,
   "pair_pass_rate": 0.05,
   "pairs": 40,
   "silent_fix": 28,
   "specificity": 0.7,
   "vuln_recall": 0.225,
   "youden": -0.07500000000000004
  },
  "sast": {
   "detected_vuln": 6,
   "labeled_expected": 11,
   "labeled_fix_leaks": 4,
   "labeled_matched": 6,
   "labeled_recall": 0.5454545454545454,
   "pair_correct": 4,
   "pair_pass_rate": 0.36363636363636365,
   "pairs": 11,
   "silent_fix": 7,
   "specificity": 0.6363636363636364,
   "vuln_recall": 0.5454545454545454,
   "youden": 0.18181818181818177
  },
  "vfc": {
   "detected_vuln": 9,
   "labeled_expected": 176,
   "labeled_fix_leaks": 66,
   "labeled_matched": 9,
   "labeled_recall": 0.05113636363636364,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 176,
   "silent_fix": 144,
   "specificity": 0.8181818181818182,
   "vuln_recall": 0.05113636363636364,
   "youden": -0.13068181818181812
  },
  "vfc-js": {
   "detected_vuln": 9,
   "labeled_expected": 17,
   "labeled_fix_leaks": 9,
   "labeled_matched": 9,
   "labeled_recall": 0.5294117647058824,
   "pair_correct": 4,
   "pair_pass_rate": 0.23529411764705882,
   "pairs": 17,
   "silent_fix": 10,
   "specificity": 0.5882352941176471,
   "vuln_recall": 0.5294117647058824,
   "youden": 0.11764705882352944
  },
  "vibe-py": {
   "detected_vuln": 16,
   "labeled_expected": 35,
   "labeled_fix_leaks": 3,
   "labeled_matched": 16,
   "labeled_recall": 0.45714285714285713,
   "pair_correct": 15,
   "pair_pass_rate": 0.42857142857142855,
   "pairs": 35,
   "silent_fix": 32,
   "specificity": 0.9142857142857143,
   "vuln_recall": 0.45714285714285713,
   "youden": 0.3714285714285714
  }
 },
 "per_tier": {
  "advisory": {
   "detected_vuln": 37,
   "labeled_expected": 250,
   "labeled_fix_leaks": 91,
   "labeled_matched": 37,
   "labeled_recall": 0.148,
   "pair_correct": 14,
   "pair_pass_rate": 0.056,
   "pairs": 250,
   "silent_fix": 195,
   "specificity": 0.78,
   "vuln_recall": 0.148,
   "youden": -0.07199999999999998
  },
  "reviewed": {
   "detected_vuln": 3,
   "labeled_expected": 28,
   "labeled_fix_leaks": 0,
   "labeled_matched": 28,
   "labeled_recall": 1.0,
   "pair_correct": 3,
   "pair_pass_rate": 1.0,
   "pairs": 3,
   "silent_fix": 3,
   "specificity": 1.0,
   "vuln_recall": 1.0,
   "youden": 1.0
  },
  "seeded": {
   "detected_vuln": 16,
   "labeled_expected": 35,
   "labeled_fix_leaks": 3,
   "labeled_matched": 16,
   "labeled_recall": 0.45714285714285713,
   "pair_correct": 15,
   "pair_pass_rate": 0.42857142857142855,
   "pairs": 35,
   "silent_fix": 32,
   "specificity": 0.9142857142857143,
   "vuln_recall": 0.45714285714285713,
   "youden": 0.3714285714285714
  },
  "title": {
   "detected_vuln": 1,
   "labeled_expected": 29,
   "labeled_fix_leaks": 4,
   "labeled_matched": 1,
   "labeled_recall": 0.034482758620689655,
   "pair_correct": 0,
   "pair_pass_rate": 0.0,
   "pairs": 29,
   "silent_fix": 26,
   "specificity": 0.896551724137931,
   "vuln_recall": 0.034482758620689655,
   "youden": -0.0689655172413793
  }
 },
 "scorers": {
  "agent-vfc": {
   "inventory": {
    "detected_vuln": 0,
    "labeled_expected": 29,
    "labeled_fix_leaks": 0,
    "labeled_matched": 0,
    "labeled_recall": 0.0,
    "pair_correct": 0,
    "pair_pass_rate": 0.0,
    "pairs": 29,
    "silent_fix": 29,
    "specificity": 1.0,
    "vuln_recall": 0.0,
    "youden": 0.0
   },
   "overlay": {
    "detected_vuln": 1,
    "labeled_expected": 29,
    "labeled_fix_leaks": 4,
    "labeled_matched": 1,
    "labeled_recall": 0.034482758620689655,
    "pair_correct": 0,
    "pair_pass_rate": 0.0,
    "pairs": 29,
    "silent_fix": 26,
    "specificity": 0.896551724137931,
    "vuln_recall": 0.034482758620689655,
    "youden": -0.0689655172413793
   }
  },
  "owasp": {
   "inventory": {
    "detected_vuln": 0,
    "labeled_expected": 40,
    "labeled_fix_leaks": 0,
    "labeled_matched": 0,
    "labeled_recall": 0.0,
    "pair_correct": 0,
    "pair_pass_rate": 0.0,
    "pairs": 40,
    "silent_fix": 40,
    "specificity": 1.0,
    "vuln_recall": 0.0,
    "youden": 0.0
   },
   "overlay": {
    "detected_vuln": 9,
    "labeled_expected": 40,
    "labeled_fix_leaks": 12,
    "labeled_matched": 9,
    "labeled_recall": 0.225,
    "pair_correct": 2,
    "pair_pass_rate": 0.05,
    "pairs": 40,
    "silent_fix": 28,
    "specificity": 0.7,
    "vuln_recall": 0.225,
    "youden": -0.07500000000000004
   }
  },
  "sast": {
   "inventory": {
    "detected_vuln": 6,
    "labeled_expected": 11,
    "labeled_fix_leaks": 5,
    "labeled_matched": 6,
    "labeled_recall": 0.5454545454545454,
    "pair_correct": 2,
    "pair_pass_rate": 0.18181818181818182,
    "pairs": 11,
    "silent_fix": 6,
    "specificity": 0.5454545454545454,
    "vuln_recall": 0.5454545454545454,
    "youden": 0.09090909090909083
   },
   "overlay": {
    "detected_vuln": 6,
    "labeled_expected": 11,
    "labeled_fix_leaks": 4,
    "labeled_matched": 6,
    "labeled_recall": 0.5454545454545454,
    "pair_correct": 4,
    "pair_pass_rate": 0.36363636363636365,
    "pairs": 11,
    "silent_fix": 7,
    "specificity": 0.6363636363636364,
    "vuln_recall": 0.5454545454545454,
    "youden": 0.18181818181818177
   }
  },
  "vfc": {
   "inventory": {
    "detected_vuln": 9,
    "labeled_expected": 176,
    "labeled_fix_leaks": 65,
    "labeled_matched": 9,
    "labeled_recall": 0.05113636363636364,
    "pair_correct": 0,
    "pair_pass_rate": 0.0,
    "pairs": 176,
    "silent_fix": 145,
    "specificity": 0.8238636363636364,
    "vuln_recall": 0.05113636363636364,
    "youden": -0.125
   },
   "overlay": {
    "detected_vuln": 9,
    "labeled_expected": 176,
    "labeled_fix_leaks": 66,
    "labeled_matched": 9,
    "labeled_recall": 0.05113636363636364,
    "pair_correct": 0,
    "pair_pass_rate": 0.0,
    "pairs": 176,
    "silent_fix": 144,
    "specificity": 0.8181818181818182,
    "vuln_recall": 0.05113636363636364,
    "youden": -0.13068181818181812
   }
  },
  "vfc-js": {
   "inventory": {
    "detected_vuln": 9,
    "labeled_expected": 17,
    "labeled_fix_leaks": 5,
    "labeled_matched": 9,
    "labeled_recall": 0.5294117647058824,
    "pair_correct": 5,
    "pair_pass_rate": 0.29411764705882354,
    "pairs": 17,
    "silent_fix": 12,
    "specificity": 0.7058823529411765,
    "vuln_recall": 0.5294117647058824,
    "youden": 0.23529411764705888
   },
   "overlay": {
    "detected_vuln": 9,
    "labeled_expected": 17,
    "labeled_fix_leaks": 9,
    "labeled_matched": 9,
    "labeled_recall": 0.5294117647058824,
    "pair_correct": 4,
    "pair_pass_rate": 0.23529411764705882,
    "pairs": 17,
    "silent_fix": 10,
    "specificity": 0.5882352941176471,
    "vuln_recall": 0.5294117647058824,
    "youden": 0.11764705882352944
   }
  },
  "vibe-py": {
   "inventory": {
    "detected_vuln": 9,
    "labeled_expected": 35,
    "labeled_fix_leaks": 9,
    "labeled_matched": 9,
    "labeled_recall": 0.2571428571428571,
    "pair_correct": 7,
    "pair_pass_rate": 0.2,
    "pairs": 35,
    "silent_fix": 33,
    "specificity": 0.9428571428571428,
    "vuln_recall": 0.2571428571428571,
    "youden": 0.19999999999999996
   },
   "overlay": {
    "detected_vuln": 16,
    "labeled_expected": 35,
    "labeled_fix_leaks": 3,
    "labeled_matched": 16,
    "labeled_recall": 0.45714285714285713,
    "pair_correct": 15,
    "pair_pass_rate": 0.42857142857142855,
    "pairs": 35,
    "silent_fix": 32,
    "specificity": 0.9142857142857143,
    "vuln_recall": 0.45714285714285713,
    "youden": 0.3714285714285714
   }
  }
 },
 "signals": [
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22901-ossl_connect_step1",
   "path": "c-unsafe-copy:lib/vtls/openssl.c:364",
   "profile": "human",
   "rule_id": "c-unsafe-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27780",
   "path": "c-unsafe-copy:lib/urlapi.c:68",
   "profile": "human",
   "rule_id": "c-unsafe-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-ossl_connect_step1",
   "path": "c-unsafe-copy:lib/vtls/openssl.c:365",
   "profile": "human",
   "rule_id": "c-unsafe-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "fixed_buffer_capacity"
   ],
   "pair": "juliet-c-cwe121-strcpy",
   "path": "c-unsafe-copy:CWE121_char_declare_cpy_01.c:16",
   "profile": "synthetic",
   "rule_id": "c-unsafe-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22901-ossl_connect_step1",
   "path": "c-unsafe-memory-copy:lib/vtls/openssl.c:224",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22901-ossl_connect_step1",
   "path": "c-unsafe-memory-copy:lib/vtls/openssl.c:231",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-nss_setup_connect",
   "path": "c-unsafe-memory-copy:lib/vtls/nss.c:292",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-nss_setup_connect",
   "path": "c-unsafe-memory-copy:lib/vtls/nss.c:297",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-ossl_connect_step1",
   "path": "c-unsafe-memory-copy:lib/vtls/openssl.c:224",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-ossl_connect_step1",
   "path": "c-unsafe-memory-copy:lib/vtls/openssl.c:231",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "curl-cve-2023-38545",
   "path": "c-unsafe-memory-copy:lib/socks.c:197",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "curl-cve-2023-38545",
   "path": "c-unsafe-memory-copy:lib/socks.c:207",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "curl-cve-2023-38545",
   "path": "c-unsafe-memory-copy:lib/socks.c:360",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "curl-cve-2023-38545",
   "path": "c-unsafe-memory-copy:lib/socks.c:367",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "curl-cve-2023-38545",
   "path": "c-unsafe-memory-copy:lib/socks.c:373",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2023-38545-do_socks5",
   "path": "c-unsafe-memory-copy:lib/socks.c:197",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2023-38545-do_socks5",
   "path": "c-unsafe-memory-copy:lib/socks.c:207",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2023-38545-do_socks5",
   "path": "c-unsafe-memory-copy:lib/socks.c:360",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2023-38545-do_socks5",
   "path": "c-unsafe-memory-copy:lib/socks.c:367",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2023-38545-do_socks5",
   "path": "c-unsafe-memory-copy:lib/socks.c:373",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "firefox-cve-2020-15667",
   "path": "c-unsafe-memory-copy:modules/libmar/src/mar_read.c:46",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2014-0160",
   "path": "c-unsafe-memory-copy:ssl/t1_lib.c:80",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2020-25659",
   "path": "c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:217",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "signed_size_operand"
   ],
   "pair": "openssl-cve-2021-23840",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:60",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "signed_size_operand"
   ],
   "pair": "openssl-cve-2021-23840",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:78",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "signed_size_operand"
   ],
   "pair": "openssl-cve-2021-23840",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:97",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:67",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:86",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:105",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-ssl_generate_master_secr",
   "path": "c-unsafe-memory-copy:ssl/s3_lib.c:39",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-ssl_generate_master_secr",
   "path": "c-unsafe-memory-copy:ssl/s3_lib.c:42",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_process_finished",
   "path": "c-unsafe-memory-copy:ssl/statem/statem_lib.c:84",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_process_finished",
   "path": "c-unsafe-memory-copy:ssl/statem/statem_lib.c:88",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:289",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:290",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:302",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2022-3602",
   "path": "c-unsafe-memory-copy:crypto/punycode.c:81",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-3602-ossl_punycode_decode",
   "path": "c-unsafe-memory-copy:crypto/punycode.c:81",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2022-37454",
   "path": "c-unsafe-memory-copy:providers/implementations/kdfs/hkdf.c:68",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2022-3786",
   "path": "c-unsafe-memory-copy:crypto/punycode.c:80",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2022-3786-ossl_punycode_decode",
   "path": "c-unsafe-memory-copy:crypto/punycode.c:80",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt",
   "path": "c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:134",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-5363",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:173",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-5363",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:181",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-5363",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:332",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-5363",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:333",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-5363",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:345",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "uaf"
   ],
   "pair": "openssl-cve-2024-4741",
   "path": "c-unsafe-memory-copy:ssl/record/rec_layer_s3.c:67",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn",
   "path": "c-unsafe-memory-copy:ssl/statem/extensions_clnt.c:57",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-15467",
   "path": "c-unsafe-memory-copy:crypto/evp/evp_lib.c:26",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-68160",
   "path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:48",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-68160",
   "path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:54",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-68160",
   "path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:72",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-68160",
   "path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:111",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-68160",
   "path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:117",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-69418",
   "path": "c-unsafe-memory-copy:crypto/modes/ocb128.c:57",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-69418",
   "path": "c-unsafe-memory-copy:crypto/modes/ocb128.c:68",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-69418",
   "path": "c-unsafe-memory-copy:crypto/modes/ocb128.c:93",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-9230",
   "path": "c-unsafe-memory-copy:crypto/cms/cms_pwri.c:59",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-2673",
   "path": "c-unsafe-memory-copy:ssl/t1_lib.c:102",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-2673",
   "path": "c-unsafe-memory-copy:ssl/t1_lib.c:167",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-45446",
   "path": "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:46",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-45446",
   "path": "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:63",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-45446",
   "path": "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:78",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor",
   "path": "c-unsafe-memory-copy:ssl/record/methods/dtls_meth.c:44",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2026-9076",
   "path": "c-unsafe-memory-copy:crypto/cms/cms_pwri.c:61",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "dns-sync-0-1-0",
   "path": "js-command-exec:lib/dns-sync.js:28",
   "profile": "human",
   "rule_id": "js-command-exec",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "pidusage-1-0-0",
   "path": "js-command-exec:lib/stats.js:119",
   "profile": "human",
   "rule_id": "js-command-exec",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "portprocesses-1-0-4",
   "path": "js-command-exec:index.js:21",
   "profile": "human",
   "rule_id": "js-command-exec",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "whereis-0-4-0",
   "path": "js-command-exec:index.js:23",
   "profile": "human",
   "rule_id": "js-command-exec",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "underscore-1-13-0-0",
   "path": "js-function-constructor:modules/template.js:63",
   "profile": "human",
   "rule_id": "js-function-constructor",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "apex-publish-static-files-2-0-0",
   "path": "overlay-coverage:index.js:22:prototype.merge",
   "profile": "human",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8177",
   "path": "overlay-coverage:src/tool_cb_hdr.c:180:printf",
   "profile": "human",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "libnmap-0-4-11",
   "path": "overlay-coverage:lib/classes/tools.js:26:prototype.merge",
   "profile": "human",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "market-cap-route-4f8ae9",
   "path": "overlay-coverage:app/auth/confirm/route.ts:26:redirect",
   "profile": "agent",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "market-cap-route-4f8ae9",
   "path": "overlay-coverage:app/auth/confirm/route.ts:30:redirect",
   "profile": "agent",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "owasp-java-sqli",
   "path": "overlay-coverage:org/owasp/benchmark/testcode/BenchmarkTest00008.java:54:executeQuery",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00036",
   "path": "overlay-coverage:testcode/BenchmarkTest00036.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00041",
   "path": "overlay-coverage:testcode/BenchmarkTest00041.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00152",
   "path": "overlay-coverage:testcode/BenchmarkTest00152.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00154",
   "path": "overlay-coverage:testcode/BenchmarkTest00154.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00155",
   "path": "overlay-coverage:testcode/BenchmarkTest00155.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00279",
   "path": "overlay-coverage:testcode/BenchmarkTest00279.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00280",
   "path": "overlay-coverage:testcode/BenchmarkTest00280.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00284",
   "path": "overlay-coverage:testcode/BenchmarkTest00284.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00287",
   "path": "overlay-coverage:testcode/BenchmarkTest00287.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00290",
   "path": "overlay-coverage:testcode/BenchmarkTest00290.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00291",
   "path": "overlay-coverage:testcode/BenchmarkTest00291.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00292",
   "path": "overlay-coverage:testcode/BenchmarkTest00292.java:56:response.write",
   "profile": "synthetic",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "pidusage-1-0-0",
   "path": "overlay-coverage:lib/stats.js:29:path.open",
   "profile": "human",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "pidusage-1-0-0",
   "path": "overlay-coverage:lib/stats.js:61:path.open",
   "profile": "human",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "rag-pipeline-utils-config-handler-76e5f0",
   "path": "overlay-coverage:src/cli/handlers/config-handler.js:15:path.open",
   "profile": "agent",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "registry-proxy-worker-426847",
   "path": "overlay-coverage:src/worker.js:30:prototype.merge",
   "profile": "agent",
   "rule_id": "overlay-coverage",
   "side": "fixed",
   "signal": "fp",
   "split": "holdout"
  },
  {
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-python-cmdi",
   "path": "python-shell-true:testcode/BenchmarkTest00165.py:58",
   "profile": "synthetic",
   "rule_id": "python-shell-true",
   "side": "fixed",
   "signal": "fp",
   "split": "train"
  },
  {
   "cwe": "CWE-918",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "anastasios-pw-session-14ec1a",
   "path": "extensions/browser/src/browser/pw-session.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "angular-http-server-1-0-0",
   "path": "angular-http-server.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-918",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "astroclaw-pw-session-1553a8",
   "path": "extensions/browser/src/browser/pw-session.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "capgo-app-hono-4dadd2",
   "path": "supabase/functions/_backend/utils/hono.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-20",
   "mechanisms": [
    "validation_strength"
   ],
   "pair": "chromium-cve-2022-2162",
   "path": "content/browser/file_system_access/file_system_chooser.cc",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "clamscan-1-2-0",
   "path": "index.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8177",
   "path": "src/tool_cb_hdr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8231-curl_multi_add_handle",
   "path": "lib/multi.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8231-curl_open",
   "path": "lib/url.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8284",
   "path": "lib/url.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8284-config_init",
   "path": "src/tool_cfgable.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2020-8286",
   "path": "lib/vtls/openssl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22876",
   "path": "lib/transfer.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22890",
   "path": "lib/vtls/bearssl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22898",
   "path": "lib/telnet.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22901-ossl_connect_step1",
   "path": "lib/vtls/openssl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22924",
   "path": "lib/url.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22924-nss_do_connect",
   "path": "lib/vtls/nss.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22924-servercert",
   "path": "lib/vtls/openssl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22925",
   "path": "lib/telnet.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22945",
   "path": "lib/mqtt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22946",
   "path": "lib/ftp.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22946-imap_state_capability_re",
   "path": "lib/imap.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22946-pop3_state_capa_resp",
   "path": "lib/pop3.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22947",
   "path": "lib/ftp.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22947-imap_state_starttls_resp",
   "path": "lib/imap.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22947-pop3_state_starttls_resp",
   "path": "lib/pop3.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2021-22947-smtp_state_starttls_resp",
   "path": "lib/smtp.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-22576-conn_free",
   "path": "lib/url.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27774",
   "path": "lib/transfer.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27775",
   "path": "lib/conncache.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27776",
   "path": "lib/http.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27778",
   "path": "src/tool_operate.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27780",
   "path": "lib/urlapi.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co",
   "path": "lib/vtls/vtls.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-curl_init_userdefined",
   "path": "lib/url.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-gtls_shutdown",
   "path": "lib/vtls/gtls.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-nss_setup_connect",
   "path": "lib/vtls/nss.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-27782-ossl_connect_step1",
   "path": "lib/vtls/openssl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-30115",
   "path": "lib/hsts.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-32206",
   "path": "lib/content_encoding.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-32207",
   "path": "lib/cookie.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2022-32208",
   "path": "lib/krb5.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2023-38545-do_socks5",
   "path": "lib/socks.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "curl-cve-2026-9080",
   "path": "lib/multi_ev.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "damn-vulnerable-graphql-application-views-mutate",
   "path": "core/views.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "damn-vulnerable-graphql-application-views-resolve-system-dia",
   "path": "core/views.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "dnf-plugin-anyrepo-config-26d19a",
   "path": "dnf_plugin_anyrepo/config.py",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-326",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "dsvpwa-dsvpwa-main",
   "path": "dsvpwa.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "dvpwa-app-init",
   "path": "sqli/app.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-1004",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "dvpwa-middlewares-session-middleware",
   "path": "sqli/middlewares.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "edutrace-page-ee7ba2",
   "path": "front/src/app/editar-anamnese/page.tsx",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "etude-lexical-markdown-editorconfig-c61a8b",
   "path": "src/config/editorConfig.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "etude-lexical-markdown-editorconfig-db4f54",
   "path": "src/config/editorConfig.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-502",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "extremely-vulnerable-flask-app-account-before-request",
   "path": "routes/account.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "extremely-vulnerable-flask-app-account-search",
   "path": "routes/account.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-770",
   "mechanisms": [
    "unchecked_alloc_size"
   ],
   "pair": "firefox-bug-2058173",
   "path": "modules/libmar/src/mar_read.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "glance-3-0-0",
   "path": "index.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "hot-formula-parser-3-0-0",
   "path": "src/grammar-parser/grammar-parser.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "hutool-cve-2018-17297",
   "path": "cn/hutool/core/util/ZipUtil.java",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "libnmap-0-4-11",
   "path": "lib/classes/tools.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "melodix-playerprovider-089931",
   "path": "apps/miniapp/src/components/PlayerProvider.tsx",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "mercado-do-vale-news-catalogmetadataservice-9b5fcf",
   "path": "services/catalogMetadataService.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "money-track-category-icons-4d4a5b",
   "path": "src/lib/category-icons.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "nestjs-filter-normalizer-aa0e60",
   "path": "packages/core/src/input/normalizer.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "new-erp-final-app-6e9644",
   "path": "src/presentation/http/app.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-918",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "nimestream-route-d17f53",
   "path": "app/api/img/route.js",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "identity_from_request_body"
   ],
   "pair": "openniw-jobs-0fc947",
   "path": "backend/app/routers/jobs.py",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "identity_from_request_body"
   ],
   "pair": "openniw-jobs-b74de3",
   "path": "backend/app/routers/jobs.py",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2020-1967",
   "path": "ssl/t1_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2020-1967-tls1_check_sig_alg",
   "path": "ssl/t1_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2020-1971",
   "path": "crypto/x509/v3_genn.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2020-1971-general_name_cmp",
   "path": "crypto/x509v3/v3_genn.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2020-25659",
   "path": "crypto/rsa/rsa_ossl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-190",
   "mechanisms": [
    "signed_size_operand"
   ],
   "pair": "openssl-cve-2021-23840",
   "path": "crypto/evp/evp_enc.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2021-23841",
   "path": "crypto/x509/x509_cmp.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449",
   "path": "ssl/record/methods/tls_common.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-def_generate_session_id",
   "path": "ssl/ssl_sess.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2021-3449-init_sig_algs",
   "path": "ssl/statem/extensions.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-init_sig_algs_cert",
   "path": "ssl/statem/extensions.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos",
   "path": "ssl/ssl_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-ssl_generate_master_secr",
   "path": "ssl/s3_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_construct_ctos_early",
   "path": "ssl/statem/extensions_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_handle_alpn",
   "path": "ssl/statem/statem_srvr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia",
   "path": "ssl/statem/extensions_srvr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_process_certificate_",
   "path": "ssl/statem/statem_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3449-tls_process_finished",
   "path": "ssl/statem/statem_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3450",
   "path": "crypto/x509/x509_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-120",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2021-3711",
   "path": "crypto/sm2/sm2_crypt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt",
   "path": "crypto/sm2/sm2_pmeth.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3711-sm2_asym_decrypt",
   "path": "providers/implementations/asymciphers/sm2_enc.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-125",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2021-3712",
   "path": "crypto/x509/v3_utl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-append_ia5",
   "path": "crypto/x509/v3_utl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-general_name_print",
   "path": "crypto/x509/v3_san.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-i2r_pci",
   "path": "crypto/x509/v3_pci.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-ia5ncasecmp",
   "path": "crypto/x509/v3_ncons.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-netscape_spki_print",
   "path": "crypto/asn1/t_spki.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet",
   "path": "crypto/cmp/cmp_hdr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-3712-print_qualifiers",
   "path": "crypto/x509/v3_cpols.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-4044",
   "path": "crypto/x509/x509_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2021-4044-tls_post_process_server_",
   "path": "ssl/statem/statem_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-835",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-0778",
   "path": "crypto/bn/bn_sqrt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "openssl-cve-2022-1292",
   "path": "tools/c_rehash.in",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-1343",
   "path": "crypto/ocsp/ocsp_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-1434",
   "path": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-2068-hash_dir",
   "path": "tools/c_rehash.in",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-29242",
   "path": "ssl/statem/statem_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2022-3358",
   "path": "crypto/evp/digest.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
   "path": "crypto/evp/evp_enc.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-3602-ossl_punycode_decode",
   "path": "crypto/punycode.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2022-3786-ossl_punycode_decode",
   "path": "crypto/punycode.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-3996",
   "path": "crypto/x509/pcy_map.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-4304",
   "path": "crypto/bn/bn_asm.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex",
   "path": "crypto/bn/bn_blind.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-4304-rsa_blinding_invert",
   "path": "crypto/rsa/rsa_ossl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt",
   "path": "crypto/rsa/rsa_ossl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0216",
   "path": "crypto/pkcs7/pk7_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0217",
   "path": "crypto/ffc/ffc_key_validate.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-843",
   "mechanisms": [
    "type_confusion"
   ],
   "pair": "openssl-cve-2023-0286",
   "path": "crypto/x509/v3_genn.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0286-general_name_cmp",
   "path": "crypto/x509/v3_genn.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0401",
   "path": "crypto/pkcs7/pk7_doit.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0464",
   "path": "crypto/x509v3/pcy_tree.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0464-tree_init",
   "path": "crypto/x509/pcy_tree.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-0465",
   "path": "crypto/x509/x509_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-2650",
   "path": "crypto/objects/obj_dat.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-2975",
   "path": "providers/implementations/ciphers/cipher_aes_siv.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-3446",
   "path": "crypto/dh/dh_check.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-3817-dh_check",
   "path": "crypto/dh/dh_check.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2023-5363",
   "path": "crypto/evp/evp_enc.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2024-0727",
   "path": "crypto/pkcs12/p12_mutl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2024-0727-smime_write_pkcs7",
   "path": "crypto/pkcs7/pk7_mime.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-12797",
   "path": "ssl/statem/statem_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord",
   "path": "crypto/ec/ec_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-2511",
   "path": "ssl/ssl_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-2511-tls_construct_server_hel",
   "path": "ssl/statem/statem_srvr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-4603",
   "path": "crypto/dsa/dsa_check.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-416",
   "mechanisms": [
    "uaf"
   ],
   "pair": "openssl-cve-2024-4741",
   "path": "ssl/record/rec_layer_s3.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-416",
   "mechanisms": [
    "uaf"
   ],
   "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer",
   "path": "ssl/record/ssl3_buffer.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-4741-ssl_free_buffers",
   "path": "ssl/ssl_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-4741-tls_free_buffers",
   "path": "ssl/record/methods/tls_common.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-416",
   "mechanisms": [
    "uaf"
   ],
   "pair": "openssl-cve-2024-4741-tls_release_read_buffer",
   "path": "ssl/record/methods/tls_common.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-5535",
   "path": "ssl/statem/extensions_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-5535-alpn_select_cb",
   "path": "ssl/quic/quic_tserver.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-5535-ssl_select_next_proto",
   "path": "ssl/ssl_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_",
   "path": "ssl/statem/extensions_srvr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn",
   "path": "ssl/statem/extensions_clnt.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2024-6119",
   "path": "crypto/x509/v3_utl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-11187",
   "path": "crypto/pkcs12/p12_mutl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-15467",
   "path": "crypto/evp/evp_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-15469",
   "path": "apps/dgst.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-770",
   "mechanisms": [
    "unchecked_alloc_size"
   ],
   "pair": "openssl-cve-2025-66199",
   "path": "ssl/statem/statem_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-66199-tls13_process_compressed",
   "path": "ssl/statem/statem_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-69418",
   "path": "crypto/modes/ocb128.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2025-69419",
   "path": "crypto/pkcs12/p12_utl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2025-69421",
   "path": "crypto/pkcs12/p12_decr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2025-9232",
   "path": "crypto/http/http_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-14456-expect_quic_for_value",
   "path": "ssl/quic/quic_impl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-14456-port_default_packet_hand",
   "path": "ssl/quic/quic_port.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-14457",
   "path": "ssl/t1_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-18798",
   "path": "ssl/quic/quic_port.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-2673",
   "path": "ssl/t1_lib.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-28388",
   "path": "crypto/x509/x509_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-28389",
   "path": "crypto/cms/cms_rsa.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info",
   "path": "crypto/cms/cms_dh.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info",
   "path": "crypto/cms/cms_ec.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2026-31789",
   "path": "crypto/o_str.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-31790",
   "path": "providers/implementations/kem/rsa_kem.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-31790-rsasve_generate",
   "path": "providers/implementations/kem/rsa_kem.c.in",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-34181",
   "path": "crypto/pkcs12/p12_mutl.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-35188",
   "path": "crypto/x509/x509_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-42764",
   "path": "ssl/quic/quic_port.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-42765",
   "path": "crypto/x509/x509_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-42766",
   "path": "crypto/cms/cms_pwri.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-42768",
   "path": "crypto/cms/cms_env.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo",
   "path": "crypto/pkcs7/pk7_doit.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-476",
   "mechanisms": [
    "null_deref_unguarded"
   ],
   "pair": "openssl-cve-2026-42769",
   "path": "crypto/cmp/cmp_genm.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-42771",
   "path": "crypto/x509/x509_vpm.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-45445",
   "path": "providers/implementations/ciphers/cipher_aes_ocb.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-45446",
   "path": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params",
   "path": "providers/implementations/ciphers/cipher_aes_siv.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-416",
   "mechanisms": [
    "uaf"
   ],
   "pair": "openssl-cve-2026-45447",
   "path": "crypto/pkcs7/pk7_smime.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-54874",
   "path": "ssl/record/rec_layer_d1.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-54874-dtls1_process_record",
   "path": "ssl/record/ssl3_record.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor",
   "path": "ssl/record/methods/dtls_meth.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2026-63072",
   "path": "crypto/cms/cms_kari.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "openssl-cve-2026-63072-cms_kek_cipher",
   "path": "crypto/cms/cms_kemri.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-63073",
   "path": "crypto/cmp/cmp_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-63074",
   "path": "crypto/cmp/cmp_vfy.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-63075-txp_pkt_commit",
   "path": "ssl/quic/quic_txp.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-7383",
   "path": "crypto/asn1/a_mbstr.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-75803",
   "path": "providers/implementations/ciphers/cipher_aes_ocb.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish",
   "path": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-119",
   "mechanisms": [
    "other"
   ],
   "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher",
   "path": "providers/implementations/ciphers/cipher_chacha20_poly1305.c",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "identity_from_request_body"
   ],
   "pair": "overleaf-with-claude-exportscontroller-3980b9",
   "path": "services/web/app/src/Features/Exports/ExportsController.mjs",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00013",
   "path": "testcode/BenchmarkTest00013.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00014",
   "path": "testcode/BenchmarkTest00014.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00030",
   "path": "testcode/BenchmarkTest00030.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00041",
   "path": "testcode/BenchmarkTest00041.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00144",
   "path": "testcode/BenchmarkTest00144.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00145",
   "path": "testcode/BenchmarkTest00145.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00146",
   "path": "testcode/BenchmarkTest00146.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00148",
   "path": "testcode/BenchmarkTest00148.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00149",
   "path": "testcode/BenchmarkTest00149.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00150",
   "path": "testcode/BenchmarkTest00150.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00152",
   "path": "testcode/BenchmarkTest00152.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00153",
   "path": "testcode/BenchmarkTest00153.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00154",
   "path": "testcode/BenchmarkTest00154.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00156",
   "path": "testcode/BenchmarkTest00156.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00279",
   "path": "testcode/BenchmarkTest00279.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00280",
   "path": "testcode/BenchmarkTest00280.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00301",
   "path": "testcode/BenchmarkTest00301.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00375",
   "path": "testcode/BenchmarkTest00375.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00376",
   "path": "testcode/BenchmarkTest00376.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00378",
   "path": "testcode/BenchmarkTest00378.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00380",
   "path": "testcode/BenchmarkTest00380.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00382",
   "path": "testcode/BenchmarkTest00382.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00383",
   "path": "testcode/BenchmarkTest00383.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00384",
   "path": "testcode/BenchmarkTest00384.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00385",
   "path": "testcode/BenchmarkTest00385.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00387",
   "path": "testcode/BenchmarkTest00387.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00388",
   "path": "testcode/BenchmarkTest00388.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00390",
   "path": "testcode/BenchmarkTest00390.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00392",
   "path": "testcode/BenchmarkTest00392.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00395",
   "path": "testcode/BenchmarkTest00395.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-xss-benchmarktest00467",
   "path": "testcode/BenchmarkTest00467.java",
   "profile": "synthetic",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "popmark-editorconfig-e5ac40",
   "path": "src/lexical-markdown/config/editorConfig.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-1321",
   "mechanisms": [
    "prototype_pollution"
   ],
   "pair": "rag-pipeline-utils-config-handler-76e5f0",
   "path": "src/cli/handlers/config-handler.js",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "registry-proxy-worker-426847",
   "path": "src/worker.js",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "serve-here-js-1-1-0",
   "path": "source/response.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-94",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "static-eval-1-1-1",
   "path": "index.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "identity_from_request_body"
   ],
   "pair": "supplieradvisor-mvp-route-387bcf",
   "path": "app/api/customers/claims/route.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "identity_from_request_body"
   ],
   "pair": "supplieradvisor-mvp-route-a69e8f",
   "path": "app/api/customers/opportunities/route.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "sven-cwe-089-query-concat",
   "path": "modules/query_lastfm.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-862",
   "mechanisms": [
    "missing_auth_guard"
   ],
   "pair": "threatbyte-api-v1-delete",
   "path": "server/api/v1/api_v1.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "missing_auth_guard"
   ],
   "pair": "threatbyte-api-v1-get",
   "path": "server/api/v1/api_v1.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "tools-cli-tools-a96bc0",
   "path": "src/shared/python/ai/tools/cli_tools.py",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "trackly-cli-path-diagnostics-1c1aed",
   "path": "lib/path-diagnostics.js",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-94",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "underscore-1-13-0-0",
   "path": "modules/template.js",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "upstreamdrift-local-server-c3a078",
   "path": "src/api/local_server.py",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-639",
   "mechanisms": [
    "missing_auth_guard"
   ],
   "pair": "vampi-users-update-password",
   "path": "api_views/users.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "vfapi-main-delete-user",
   "path": "main.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "vfapi-main-put-user",
   "path": "main.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "vfapi-main-sql-return-users-from-username",
   "path": "main.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-79",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "vulnerable-python-apps-bad-mvc-do-get",
   "path": "Insecure_Frameworks/bad_mvc.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-22",
   "mechanisms": [
    "path_join_user_input"
   ],
   "pair": "vulnerable-python-apps-dir-traversal-do-get",
   "path": "Directory_Traversal/Dir_Traversal.py",
   "profile": "human",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-918",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "waggledance-swarm-ssrf-host-guard-9a4548",
   "path": "waggledance/core/v3_13_0/ssrf_host_guard.py",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "source_reaches_sink"
   ],
   "pair": "workers-research-utils-209444",
   "path": "src/utils.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-16",
   "mechanisms": [
    "permissive_default"
   ],
   "pair": "zoonk-origin-bfbf67",
   "path": "packages/utils/src/origin.ts",
   "profile": "agent",
   "rule_id": "",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-416",
   "mechanisms": [
    "uaf"
   ],
   "pair": "chromium-cve-2019-5786",
   "path": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-122",
   "mechanisms": [
    "unchecked_length_copy"
   ],
   "pair": "curl-cve-2023-38545",
   "path": "lib/socks.c",
   "profile": "human",
   "rule_id": "c-unsafe-memory-copy",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-78",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-python-cmdi",
   "path": "testcode/BenchmarkTest00165.py",
   "profile": "synthetic",
   "rule_id": "python-shell-true",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-89",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-python-sqli",
   "path": "testcode/BenchmarkTest00099.py",
   "profile": "synthetic",
   "rule_id": "python-sql-injection",
   "signal": "miss",
   "split": "holdout"
  },
  {
   "cwe": "CWE-94",
   "mechanisms": [
    "container_taint"
   ],
   "pair": "owasp-python-codeinj",
   "path": "testcode/BenchmarkTest00074.py",
   "profile": "synthetic",
   "rule_id": "python-unsafe-eval",
   "signal": "miss",
   "split": "train"
  },
  {
   "cwe": "CWE-327",
   "mechanisms": [
    "config_sink_weak_literal"
   ],
   "pair": "owasp-python-hash",
   "path": "testcode/BenchmarkTest00054.py",
   "profile": "synthetic",
   "rule_id": "python-weak-hash",
   "signal": "miss",
   "split": "holdout"
  }
 ]
}