CoolFace
Datasetpublic

harsharajkumar273/api-vulnerability-dataset-10k

API Vulnerability Dataset (10K) A dataset of 10,000 API-specific vulnerability samples used to fine-tune harsharajkumar273/api-security-qlora — a QLoRA adapter on CodeLlama-7b for automated API security analysis. Dataset Summary Each sample contains a vulnerable or clean API endpoint code snippet paired with a structured security analysis covering vulnerability type, severity, CWE ID, and a remediated version. Language & Framework Distribution… See the full description on the dataset page: https://huggingface.co/datasets/harsharajkumar273/api-vulnerability-dataset-10k.

sourceHugging Facemitupdated 5mo agoView on Hugging Face
0likes49downloads
Dataset Card

API Vulnerability Dataset (10K)

A dataset of 10,000 API-specific vulnerability samples used to fine-tune harsharajkumar273/api-security-qlora — a QLoRA adapter on CodeLlama-7b for automated API security analysis.

Dataset Summary

Each sample contains a vulnerable or clean API endpoint code snippet paired with a structured security analysis covering vulnerability type, severity, CWE ID, and a remediated version.

Language & Framework Distribution

LanguageShareFrameworks
Python46%Flask, FastAPI, Django
JavaScript25%Express.js, NestJS
Java15%Spring Boot
PHP / Go / Ruby / C#14%Laravel, Gin, Rails, ASP.NET

Vulnerability Distribution

VulnerabilitySamplesCWE
SQL Injection2,425CWE-89
Mass Assignment1,307CWE-915
Path Traversal943CWE-22
IDOR860CWE-639
Broken Authorization792CWE-285
Command Injection600CWE-78

Severity Breakdown

  • Critical (43%): RCE, SQLi, unauthorized admin access
  • High (41%): Data leaks, IDOR, authorization bypass
  • Medium / Clean (16%): XSS, input validation warnings, baseline clean samples

Usage

This dataset was used to fine-tune the api-security-qlora adapter and is also consumed directly by the API Security Scanner rules engine.

Credits

CS6380 — API Security Project Authors: Siddhanth Nilesh Jagtap · Tanuj Kenchannavar · Harsha Raj Kumar