CoolFace
Datasetpublic

AriaAICompany/vuln-priority-lab

VulnPriority laboratory estate Synthetic 96-asset / dated KEV-EPSS fixture pack for the VulnPriority patch-backlog demo. Organization dataset and collection item are public. Live Gradio (alirezaaminzadeh/vuln-priority) and the organization card (AriaAICompany/vuln-priority) are queued until the Hugging Face daily Space-creation cap resets. Runnable Space source is stored in demo/. Collection: Aria AI — Cybersecurity. Generated data, seed 6, decision date 2026-03-01. Hostnames… See the full description on the dataset page: https://huggingface.co/datasets/AriaAICompany/vuln-priority-lab.

sourceHugging Facecc-by-4.0updated 5d agoView on Hugging Face
0likes93downloads
Dataset Card

VulnPriority laboratory estate

Synthetic 96-asset / dated KEV-EPSS fixture pack for the VulnPriority patch-backlog demo.

Organization dataset and collection item are public. Live Gradio (alirezaaminzadeh/vuln-priority) and the organization card (AriaAICompany/vuln-priority) are queued until the Hugging Face daily Space-creation cap resets. Runnable Space source is stored in demo/. Collection: Aria AI — Cybersecurity.

Generated data, seed 6, decision date 2026-03-01. Hostnames are *.aria.invalid placeholders. A few well-known CVE identifiers appear only as public CISA KEV citations inside a laboratory snapshot; they are not a redistributed live feed. VLN-2026-* rows are synthetic. EPSS values are lab numbers in the official column shape.

Files

  • —data/assets.csv
  • —data/findings.csv
  • —data/gold.csv
  • —data/kev_snapshot.json
  • —data/epss_snapshot.csv
  • —data/cve_catalog.json
  • —data/schema.json
  • —data/splits.json
  • —data/evaluation.json
  • —data/sample_preview.json
  • —demo/ — runnable Gradio Space source
  • —showcase/ — organization static card

Split

Development vs test is by asset_id (A01–A64 / A65–A96). Findings from the same host are never split at random.

Gold policy

must_this_week is an authored lab policy: production internet-facing high/critical assets with KEV-as-of or EPSS ≥ 0.60, or production crown-jewel DC/DB with KEV-as-of. Unknown exposure and unmatched CVEs stay unknown. The ranking score uses different weights on purpose.

License

CC-BY-4.0. Keep the synthetic-data and snapshot-citation labels.