iris-sast/CWE-Bench-Java
CWE-Bench-Java This repository contains the dataset CWE-Bench-Java presented in the paper LLM-Assisted Static Analysis for Detecting Security Vulnerabilities. At a high level, this dataset contains 120 CVEs spanning 4 CWEs, namely path-traversal, OS-command injection, cross-site scripting, and code-injection. Each CVE includes the buggy and fixed source code of the project, along with the information of the fixed files and functions. We provide the seed information for each… See the full description on the dataset page: https://huggingface.co/datasets/iris-sast/CWE-Bench-Java.
1200
1project_slug,status,jdk_version,mvn_version,gradle_version,use_gradlew
2perwendel__spark_CVE-2018-9159_2.7.1,success,8u202,3.5.0,n/a,n/a
3perwendel__spark_CVE-2016-9177_2.5.1,success,8u202,3.5.0,n/a,n/a
4square__retrofit_CVE-2018-1000850_2.4.0,success,8u202,3.5.0,n/a,n/a
5dromara__hutool_CVE-2018-17297_4.1.11,success,8u202,3.5.0,n/a,n/a
6vert-x3__vertx-web_CVE-2018-12542_3.5.3.CR1,success,8u202,3.5.0,n/a,n/a
7apache__jspwiki_CVE-2019-0225_2.11.0.M2,success,8u202,3.5.0,n/a,n/a
8wildfly__wildfly_CVE-2018-1047_11.0.0.Final,success,8u202,3.5.0,n/a,n/a
9DSpace__DSpace_CVE-2016-10726_4.4,success,8u202,3.5.0,n/a,n/a
10apache__tika_CVE-2018-11762_1.18,success,8u202,3.5.0,n/a,n/a
11codehaus-plexus__plexus-archiver_CVE-2018-1002200_3.5,success,8u202,3.5.0,n/a,n/a
12whitesource__curekit_CVE-2022-23082_1.1.3,success,8u202,3.5.0,n/a,n/a
13zeroturnaround__zt-zip_CVE-2018-1002201_1.12,success,8u202,3.5.0,n/a,n/a
14jlangch__venice_CVE-2022-36007_1.10.16,success,8u202,n/a,7.6.4,n/a
15srikanth-lingala__zip4j_CVE-2018-1002202_1.3.2,success,8u202,3.5.0,n/a,n/a
16testng-team__testng_CVE-2022-4065_7.5,success,17,n/a,n/a,1
17asf__tapestry-5_CVE-2019-0207_5.4.4,success,8u202,n/a,n/a,1
18asf__commons-io_CVE-2021-29425_2.6,success,8u202,3.5.0,n/a,n/a
19diffplug__goomph_CVE-2022-26049_3.37.1,success,8u202,n/a,n/a,1
20ESAPI__esapi-java-legacy_CVE-2022-23457_2.2.3.1,success,8u202,3.5.0,n/a,n/a
21alibaba__one-java-agent_CVE-2022-25842_0.0.1,success,8u202,3.5.0,n/a,n/a
22joniles__mpxj_CVE-2020-35460_8.3.4,success,8u202,3.5.0,n/a,n/a
23codehaus-plexus__plexus-utils_CVE-2022-4244_3.0.23,success,8u202,3.5.0,n/a,n/a
24undertow-io__undertow_CVE-2014-7816_1.0.16.Final,success,8u202,3.5.0,n/a,n/a
25codehaus-plexus__plexus-archiver_CVE-2023-37460_4.7.1,success,8u202,3.5.0,n/a,n/a
26jeremylong__DependencyCheck_CVE-2018-12036_3.1.2,success,8u202,3.5.0,n/a,n/a
27apache__rocketmq_CVE-2019-17572_4.6.0,success,8u202,3.5.0,n/a,n/a
28vert-x3__vertx-web_CVE-2019-17640_3.9.3,success,8u202,3.5.0,n/a,n/a
29apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2.10.0,success,8u202,3.5.0,n/a,n/a
30x-stream__xstream_CVE-2013-7285_1.4.6,success,8u202,3.5.0,n/a,n/a
31apache__myfaces_CVE-2011-4367_2.0.11,success,8u202,3.5.0,n/a,n/a
32spring-cloud__spring-cloud-config_CVE-2020-5405_2.1.6.RELEASE,success,8u202,3.5.0,n/a,n/a
33spring-cloud__spring-cloud-config_CVE-2020-5410_2.1.8.RELEASE,success,8u202,3.5.0,n/a,n/a
34x-stream__xstream_CVE-2021-21345_1.4.15,success,8u202,3.5.0,n/a,n/a
35codehaus-plexus__plexus-utils_CVE-2017-1000487_3.0.15,success,8u202,3.5.0,n/a,n/a
36asf__james-project_CVE-2022-22931_3.6.0,success,8u202,n/a,6.8.2,n/a
37DSpace__DSpace_CVE-2022-31194_5.10,success,8u202,3.5.0,n/a,n/a
38DSpace__DSpace_CVE-2022-31195_5.10,success,8u202,3.5.0,n/a,n/a
39xwiki__xwiki-commons_CVE-2022-24897_12.6.6,success,8u202,3.5.0,n/a,n/a
40apache__dolphinscheduler_CVE-2022-26884_2.0.5,success,8u202,3.5.0,n/a,n/a
41kubernetes-client__java_CVE-2020-8570_client-java-parent-9.0.1,success,8u202,3.5.0,n/a,n/a
42jenkinsci__git-client-plugin_CVE-2019-10392_2.8.4,success,8u202,3.5.0,n/a,n/a
43jenkinsci__perfecto-plugin_CVE-2020-2261_1.17,success,8u202,3.5.0,n/a,n/a
44nahsra__antisamy_CVE-2017-14735_1.5.6,success,17,3.9.8,n/a,n/a
45nahsra__antisamy_CVE-2016-10006_1.5.3,success,17,3.9.8,n/a,n/a
46jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544.vff04fa68714d,success,8u202,3.5.0,n/a,n/a
47jenkinsci__docker-commons-plugin_CVE-2022-20617_1.17,success,8u202,3.5.0,n/a,n/a
48jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706.vd43c65dec013,success,8u202,3.5.0,n/a,n/a
49apache__shiro_CVE-2023-34478_1.11.0,success,8u202,3.5.0,n/a,n/a
50apache__mina-sshd_CVE-2023-35887_2.9.2,success,8u202,3.5.0,n/a,n/a
51OWASP__json-sanitizer_CVE-2020-13973_1.2.0,success,8u202,3.5.0,n/a,n/a
52apache__shiro_CVE-2023-46749_1.12.0,success,17,3.9.8,n/a,n/a
53x-stream__xstream_CVE-2020-26217_1.4.14-java7,success,8u202,n/a,6.8.2,n/a
54ESAPI__esapi-java-legacy_CVE-2022-24891_2.2.3.1,success,8u202,3.5.0,n/a,n/a
55nahsra__antisamy_CVE-2022-29577_1.6.6.1,success,8u202,3.5.0,n/a,n/a
56nahsra__antisamy_CVE-2022-28367_1.6.5,success,8u202,3.5.0,n/a,n/a
57xuxueli__xxl-job_CVE-2020-29204_2.2.0,success,8u202,3.5.0,n/a,n/a
58jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25,success,8u202,3.5.0,n/a,n/a
59apache__sling-org-apache-sling-xss_CVE-2016-5394_1.0.8,success,8u202,3.5.0,n/a,n/a
60rhuss__jolokia_CVE-2018-1000129_1.4.0,success,8u202,3.5.0,n/a,n/a
61yamcs__yamcs_CVE-2023-45278_5.8.6,success,17,3.9.8,n/a,n/a
62yamcs__yamcs_CVE-2023-45277_5.8.6,success,17,3.9.8,n/a,n/a
63jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646.v6ed3b5b01ff1,success,17,3.9.8,n/a,n/a
64alibaba__nacos_CVE-2021-44667_2.0.3,success,8u202,3.5.0,n/a,n/a
65apache__uima-uimaj_CVE-2022-32287_3.3.0,success,8u202,3.5.0,n/a,n/a
66apache__jspwiki_CVE-2019-10077_2.11.0.M3,success,8u202,3.5.0,n/a,n/a
67apache__jspwiki_CVE-2019-10078_2.11.0.M3,success,8u202,3.5.0,n/a,n/a
68apache__jspwiki_CVE-2019-10076_2.11.0.M3,success,8u202,3.5.0,n/a,n/a
69apache__jspwiki_CVE-2019-10089_2.11.0.M4,success,8u202,3.5.0,n/a,n/a
70DSpace__DSpace_CVE-2022-31192_5.10,success,8u202,3.5.0,n/a,n/a
71jmrozanec__cron-utils_CVE-2021-41269_9.1.5,success,8u202,3.5.0,n/a,n/a
72jstachio__jstachio_CVE-2023-33962_1.0.0,success,17,3.5.0,n/a,n/a
73hibernate__hibernate-validator_CVE-2019-10219_6.0.17.Final,success,17,3.5.0,n/a,n/a
74spring-projects__spring-framework_CVE-2022-22965_5.2.19.RELEASE,success,8u202,n/a,n/a,1
75apache__jspwiki_CVE-2022-46907_2.11.3,success,8u202,3.5.0,n/a,n/a
76xwiki__xwiki-rendering_CVE-2023-32070_14.6,success,17,3.5.0,n/a,n/a
77keycloak__keycloak_CVE-2014-3656_1.0.5.Final,success,8u202,3.5.0,n/a,n/a
78xwiki__xwiki-commons_CVE-2023-29201_14.6,success,17,3.5.0,n/a,n/a
79xwiki__xwiki-commons_CVE-2023-29528_14.9-rc-1,success,17,3.5.0,n/a,n/a
80xwiki__xwiki-commons_CVE-2023-31126_14.10.3,success,17,3.5.0,n/a,n/a
81xwiki__xwiki-commons_CVE-2023-36471_14.10.5,success,17,3.5.0,n/a,n/a
82asf__commons-text_CVE-2022-42889_1.9,success,8u202,3.5.0,n/a,n/a
83spring-projects__spring-security_CVE-2011-2732_2.0.6.RELEASE,success,8u202,3.5.0,n/a,n/a
84apache__activemq_CVE-2014-3576_5.10.2,success,8u202,3.5.0,n/a,n/a
85xwiki__xwiki-rendering_CVE-2023-37908_14.10.3,success,17,3.5.0,n/a,n/a
86apache__struts_CVE-2020-17530_2.5.25,success,8u202,3.5.0,n/a,n/a
87xerial__sqlite-jdbc_CVE-2023-32697_3.41.2.1,success,17,3.5.0,n/a,n/a
88apache__rocketmq_CVE-2023-37582_4.9.6,success,8u202,3.5.0,n/a,n/a
89ff4j__ff4j_CVE-2022-44262_1.8.13,success,8u202,3.5.0,n/a,n/a
90SpringSource__spring-security-oauth_CVE-2018-1260_2.3.2.RELEASE,success,8u202,3.5.0,n/a,n/a
91apache__activemq_CVE-2019-0222_5.15.8,success,8u202,3.5.0,n/a,n/a
92apache__rocketmq_CVE-2023-33246_5.1.0,success,8u202,3.5.0,n/a,n/a
93apache__activemq_CVE-2020-11998_5.15.12,success,8u202,3.5.0,n/a,n/a
94spring-cloud__spring-cloud-gateway_CVE-2022-22947_3.0.6,success,8u202,3.5.0,n/a,n/a
95hapifhir__org.hl7.fhir.core_CVE-2023-24057_5.6.91,success,17,3.5.0,n/a,n/a
96eclipse-ee4j__glassfish_CVE-2022-2712_6.2.5,success,17,3.9.8,n/a,n/a
97eclipse__hawkbit_CVE-2020-27219_0.3.0M6,success,8u202,3.5.0,n/a,n/a
98hapifhir__org.hl7.fhir.core_CVE-2023-28465_5.6.105,success,17,3.5.0,n/a,n/a
99asf__karaf_CVE-2022-22932_4.3.5,success,8u202,3.5.0,n/a,n/a
100keycloak__keycloak_CVE-2022-3782_20.0.1,success,17,3.9.8,n/a,n/a
101apache__incubator-dubbo_CVE-2021-30181_2.6.8,success,8u202,3.5.0,n/a,n/a
102aws__aws-sdk-java_CVE-2022-31159_1.12.260,success,8u202,3.5.0,n/a,n/a
103asf__cxf_CVE-2016-6812_3.0.11,success,8u202,3.5.0,n/a,n/a
104keycloak__keycloak_CVE-2022-1274_20.0.4,success,17,3.9.8,n/a,n/a
105keycloak__keycloak_CVE-2022-4137_20.0.4,success,17,3.9.8,n/a,n/a
106asf__cxf_CVE-2019-17573_3.2.11,success,8u202,3.5.0,n/a,n/a
107Graylog2__graylog2-server_CVE-2023-41044_5.1.2,success,17,3.5.0,n/a,n/a
108apache__dubbo_CVE-2021-30180_2.7.9,success,8u202,3.5.0,n/a,n/a
109codecentric__spring-boot-admin_CVE-2022-46166_2.6.9,success,17,3.9.8,n/a,n/a
110payara__Payara_CVE-2022-37422_5.2022.2,success,8u202,3.9.8,n/a,n/a
111fabric8io__kubernetes-client_CVE-2021-4178_5.0.2,success,8u202,3.5.0,n/a,n/a
112apache__dolphinscheduler_CVE-2023-49109_3.2.0,success,8u202,3.5.0,n/a,n/a
113apache__dolphinscheduler_CVE-2023-51770_3.2.0,success,8u202,3.5.0,n/a,n/a
114keycloak__keycloak_CVE-2022-4361_21.1.1,success,17,3.9.8,n/a,n/a
115apache__flink_CVE-2020-17519_1.11.2,success,8u202,3.5.0,n/a,n/a
116apache__camel_CVE-2019-0194_2.21.4,success,8u202,3.5.0,n/a,n/a
117asf__nifi_CVE-2023-34468_1.21.0,success,17,3.9.8,n/a,n/a
118asf__nifi_CVE-2023-36542_1.22.0,success,17,3.9.8,n/a,n/a
119apache__nifi_CVE-2022-33140_1.16.2,success,17,3.9.8,n/a,n/a
120apache__dolphinscheduler_CVE-2022-34662_2.0.9,success,8u202,3.5.0,n/a,n/a
121apache__camel_CVE-2018-8041_2.20.3,success,8u202,3.5.0,n/a,n/a
122 