Specification-Guided Vulnerability Detection with Large Language Models

Large language models LLMs have achieved remarkable progress in code understanding tasks. However, they demonstrate limited performance in vulnerability detection and struggle to distinguish vulnerable code from patched code. We argue that LLMs lack understanding of security specifications -- the...

01os (>=0.0.1 <=0.0.14), advanced-research (>=0.1.0 <=0.2.2) +421 more potentially affected by unknown CVE via litellm (>=1.0.0 <=1.77.5)

litellm PYPI version =1.0.0, =0.0.1, =0.1.0, =0.4.0, =0.8.1, =0.1.0, =0.1.39, =0.2.1, =0.14.1a0, =0.1.0, =0.0.5, =0.3.1, =1.1.2, =1.4.3, =0.0.1, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-13803635...

aenvironment (=0.1.7rc1), agentfetch-mcp (>=1.0.0 <=1.0.1) +210 more potentially affected by unknown CVE via fastmcp (>=0.1.0 <=2.12.5)

fastmcp PYPI version =0.1.0, =1.0.0, =0.4.6, =1.8.0, =3.2.0, =3.2.0, =4.2.2, =3.0.2, =0.2.7, =1.0.0rc1, =0.2.7, =1.7.3, =0.1.12, =0.9.30, =0.9.77 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C2JP-C369-7PVX...

@chirpy-dev/analytics (=0.0.1), @chirpy-dev/ui (=0.0.1) +40 more potentially affected by unknown CVE via next-auth (>=4.0.0-beta.6 <=4.24.11)

next-auth NPM version =4.0.0-beta.6, =1.9.0, =0.1.0-0, =0.0.2, =1.0.0, =1.0.0, =4.0.0-alpha.24, =0.0.0-experimental-20260318092212, =0.0.0-experimental-20260318092212, =0.6.1, =0.0.0-0d361a26c, =1.11.1-ee257e05.17 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTAUTH-13744118...

@aweto-agent/cli (>=1.7.2 <=1.8.0), @aweto-agent/core (>=1.7.1 <=1.8.0) +42 more potentially affected by unknown CVE via hono (>=4.0.0 <=4.10.2)

hono NPM version =4.0.0, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =4.0.0-alpha.28, =0.1.0, =0.75.0, =0.18.2, =0.2.25, =0.1.0, =1.1.0, =0.1.0, =0.3.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-13720736...

CVE-2023-53720

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

alpha-g-analysis (=0.1.0), apecrunch (>=0.0.1 <=0.0.3) +179 more potentially affected by unknown CVE via ncurses (>=5.101.0 <=6.0.1)

ncurses CARGO version =5.101.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui =0.6.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-X77X-7MMH-CXV3...

3way (>=1.2.0 <=1.5.0.42), a-texam (=1.1.0) +445 more potentially affected by unknown CVE via scapy (>=2.2.0.dev0 <=2.7.0)

scapy PYPI version =2.2.0.dev0, =1.2.0, =0.1.0, =1.0.0, =1.0.0, =1.1.0, =0.1.13, =0.1.4, =0.1.0, =0.1.0, =0.2.0, =0.3.10 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-SCAPY-13669870...

alpha-g-analysis (=0.1.0), apecrunch (>=0.0.1 <=0.0.3) +179 more potentially affected by unknown CVE via ncurses (>=5.101.0 <=6.0.1)

ncurses CARGO version =5.101.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui =0.6.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0108...

orx-concurrent-bag (>=1.0.0 <=1.16.0), orx-concurrent-iter (>=1.0.0 <=1.22.1) +9 more potentially affected by unknown CVE via orx-pinned-vec (>=0.1.1 <=2.12.0)

orx-pinned-vec CARGO version =0.1.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.6.0, =2.14.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0106...

mirror_sparse_matrix (>=0.1.1 <=0.1.17) potentially affected by unknown CVE via binary_vec_io (=0.1.12)

binaryvecio CARGO version =0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on binaryvecio and may be impacted: - mirrorsparsematrix =0.1.1, =0.1.17 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0109...

CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +110 more potentially affected by unknown CVE via unic-ucd-segment (>=0.7.0 <=0.9.0)

unic-ucd-segment CARGO version =0.7.0, =0.0.0, =1.11.3, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.3.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.2.11 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0104...

nftnl (>=0.1.0 <=0.8.0) potentially affected by unknown CVE via mnl (>=0.1.0 <=0.2.3)

mnl CARGO version =0.1.0, =0.1.0, =0.8.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0142...

rev-up-your-harley (>=0.1.0 <=1.0.1), rustpython-vm (>=0.1.0 <=0.1.1) +2 more potentially affected by unknown CVE via unic-emoji (>=0.7.0 <=0.9.0)

unic-emoji CARGO version =0.7.0, =0.1.0, =0.1.0, =0.7.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0084...

aocleaderboard (>=0.1.0 <=0.6.1), archetect (>=0.5.0 <=0.7.3) +93 more potentially affected by unknown CVE via unic-segment (>=0.7.0 <=0.9.0)

unic-segment CARGO version =0.7.0, =0.1.0, =0.5.0, =0.5.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.1.0, =0.1.3, =0.2.1, =0.1.2-beta, =0.1.8 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0074...

Druid_task1 (=0.1.0), audio-processor-analysis (>=0.1.0-alpha.4 <=2.4.0) +72 more potentially affected by unknown CVE via unic-bidi (>=0.1.0 <=0.9.0)

unic-bidi CARGO version =0.1.0, =0.1.0-alpha.4, =0.4.0, =0.7.0, =0.4.0, =0.7.0, =0.2.0, =0.2.3 - frui =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0096...

rust-network-mgr (>=0.1.0 <=0.1.4) potentially affected by unknown CVE via nftnl (=0.7.0)

nftnl CARGO version =0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nftnl and may be impacted: - rust-network-mgr =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0126...

CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +22 more potentially affected by unknown CVE via unic-ucd-age (>=0.5.0 <=0.9.0)

unic-ucd-age CARGO version =0.5.0, =0.0.0, =1.11.3, =0.3.0, =0.3.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =0.1.0, =0.0.0, =0.3.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0102...

CuPs (>=0.0.0 <=0.0.5), Druid_task1 (=0.1.0) +321 more potentially affected by unknown CVE via unic-char-range (>=0.6.0 <=0.9.0)

unic-char-range CARGO version =0.6.0, =0.0.0, =1.11.3, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =2.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0075...

CuPs (>=0.0.0 <=0.0.5), Druid_task1 (=0.1.0) +319 more potentially affected by unknown CVE via unic-common (>=0.7.0 <=0.9.0)

unic-common CARGO version =0.7.0, =0.0.0, =1.11.3, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =2.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...