datasets
Training and evaluation data, with the modality, task and licence stated up front. Listed live from the Hugging Face Hub.
cve-proof-corpus
CVE Proof Corpus
Six real vulnerability classes, each with a machine-checkable proof that the shipped fix
eliminates it — and a checker that shares no code with whatever produced the proof.
Every record carries the safety relation, the guard the upstream project shipped, the declared
attacker domain, and the nonnegative multipliers that prove the guard implies safety. All six verify.
pip install "certkit@git+https://github.com/nickharris808/certkit@main"
python verify.py… See the full description on the dataset page: https://huggingface.co/datasets/nickh007/cve-proof-corpus.mitre-stix-cve-exploitdb-dataset-alpaca-chatml-harmony
MITRE+NVD+ExploitDB Dataset (Alpaca/ChatML/Harmony)
A dataset for training AI assistants/agents on vulnerability analysis and pentesting Q&A. It is built by the pentestds pipeline, which fetches and merges data from MITRE CVE, NVD (CVSS enrichment), ExploitDB, and a small set of HuggingFace datasets. Provenance is recorded for every entry, and the pipeline emits Alpaca, ChatML, and Harmony JSONL files.
Dataset Summary
This dataset is designed for training AI agents to… See the full description on the dataset page: https://huggingface.co/datasets/jason-oneal/mitre-stix-cve-exploitdb-dataset-alpaca-chatml-harmony.All-CVE-Records-Training-Dataset
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/AlicanKiraz0/All-CVE-Records-Training-Dataset.cve_train
CVE-Factory Agent Traces
This dataset contains 4,078 distilled agent traces from 887 CVE reproduction tasks (the trainset/ split), generated using Claude Opus 4.5 with a Mini SWE-Agent harness. See CVE-Factory for the full pipeline.
Note: CVE-Factory also provides a trainset-2/ split with additional simpler tasks, which is not included in this training dataset.
🚀 Training Results
Fine-tuning on this dataset yields dramatic improvements across security benchmarks:… See the full description on the dataset page: https://huggingface.co/datasets/Luoberta/cve_train.cve_train_v1.1
CVE-Factory Agent Traces v1.1
This dataset is an expanded version of cve_train, containing 18,783 distilled agent traces for CVE reproduction tasks. The traces were generated using Claude Opus 4.5 with a Mini SWE-Agent harness through the CVE-Factory pipeline.
What's New in v1.1
Compared to cve_train (v1.0):
18.8k total samples (up from ~4k in v1.0)
+3k agentic tasks from cve_tasks_3k_compressed
Additional traces from expanded CVE task coverage
Training… See the full description on the dataset page: https://huggingface.co/datasets/Luoberta/cve_train_v1.1.kepler-arc-agi-3-traces
Kepler 1.0 ARC-AGI-3 trace corpus
Run artifacts from Kepler 1.0, an open-source agent harness for the 25 public
ARC-AGI-3 games. A stock CLI coding agent
encodes its theory of each game as an executable world_model.py, certifies it
against the full recorded interaction history, plans inside the certified
model, and acts through a guarded channel that voids the plan on the first
misprediction.
Project page ·
Code ·
Paper ·
Integrity record
The canonical release contains two… See the full description on the dataset page: https://huggingface.co/datasets/cveinnt/kepler-arc-agi-3-traces.Cybersecurity-LLM-CVE2025.06.07 Updated data code :https://github.com/Bouquets-ai/Data-Processing/blob/main/CVE-Data.py
Change 121 lines of code (keyword="CVE-2025") to obtain the required CVE time
93 lines of code (json record=) to change the required format
Cybersecurity-LLM-CVE Dataset Introduction 🚀
Overview 🛡️
An open-source cybersecurity vulnerability dataset designed for training/evaluating Large Language Models (LLMs) in security domains. Covers all public CVE IDs from January 1, 2021 to April 9, 2025… See the full description on the dataset page: https://huggingface.co/datasets/Bouquets/Cybersecurity-LLM-CVE.All-CVE-Chat-MultiTurn-1999-2025-Dataset
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/Trendyol/All-CVE-Chat-MultiTurn-1999-2025-Dataset.cve-to-metasploit-module
CVE To Metasploit Module Prompt
This dataset is a submodule to the overall project to create an LLM that can look at newly published CVE writeups and create metasploit modules. The main repo for the project can be found here.
Usage
TO-DO
References
TO-DO
cve_backport_bench_12021_2026_CVE_Exploit_DatasetThis dataset contains CVE exploit explanation between 2021 and 2026. Dataset contains this columns:
cve_id: Id of CVE
description_en: Exploit explanation in English
cwe: Common Weakness Enumeration
severity: Severity of exploit
base_score: Base score
published: Published date
cvedataset.jsonl
CVE Dataset (1999-2024) for LLM Fine-Tuning
Overview
This dataset comprises Common Vulnerabilities and Exposures (CVE) records spanning from 1999 to 2024. Each entry provides essential information on software vulnerabilities, their descriptions, affected products and versions, CVSS scores, and relevant references. The data is formatted in a JSON Lines (.jsonl) structure, making it suitable for fine-tuning Large Language Models (LLMs) for tasks such as cybersecurity… See the full description on the dataset page: https://huggingface.co/datasets/iamthierno/cvedataset.jsonl.cve-exploitation-signals
CVE exploitation signals
One row per CVE joining reference data (CVSS, CWE, affected vendors and products) with exploitation signals: CISA KEV listing and due date, whether a public exploit is known, and whether the vulnerability is used by ransomware operators.
Built from the ThreatCluster corpus. 60,879 rows, snapshot generated 2026-09-06.
Fields
Field
Description
cve_id
CVE identifier
description
Vulnerability description
published_date
CVE… See the full description on the dataset page: https://huggingface.co/datasets/threatcluster/cve-exploitation-signals.all-cve-chat-multiturn-1999-2025
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/ansulev/all-cve-chat-multiturn-1999-2025.All-CVE-Records-Training-Dataset-archive
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/ChipHolmes/All-CVE-Records-Training-Dataset-archive.CVEFixescve150kai-cve-2026
ai-cve-2026
AI data collected daily by Legion API.
🔑 API Access — Updated Daily
Live data via Legion AI API
Free: 100 req/day · Pro €29/month: 50K req/day + full fields
curl "https://api.legion-api.com/incidents?limit=10" -H "X-API-Key: YOUR_PRO_KEY"
Premium archive (1,285 incidents, full analysis): AISI Intelligence Pack €299
📦 Install
pip install legion-intel
from legion_intel import LegionClient
c = LegionClient()
print(c.guard(["openai"… See the full description on the dataset page: https://huggingface.co/datasets/gemmozero/ai-cve-2026.cve-single-line-fixes
Dataset Card for Dataset Name
Dataset Summary
This dataset card aims to be a base template for new datasets. It has been generated using this raw template.
Supported Tasks and Leaderboards
[More Information Needed]
Languages
[More Information Needed]
Dataset Structure
Data Instances
[More Information Needed]
Data Fields
[More Information Needed]
Data Splits
[More Information Needed]
Dataset Creation… See the full description on the dataset page: https://huggingface.co/datasets/lambdasec/cve-single-line-fixes.cve-analysis
CVE & Vulnerability Analysis Dataset
A comprehensive vulnerability analysis and CVE research dataset. Each row is a detailed security analysis covering root cause, exploitation methodology, detection rules (Sigma/Splunk/Suricata), CVSS v3.1 scoring, MITRE ATT&CK mapping, and remediation guidance — verified by the same model in an independent review pass.
Overview
This dataset contains 9,999 structured vulnerability analyses across 20 security domains. Unlike simple… See the full description on the dataset page: https://huggingface.co/datasets/sh111111111111111/cve-analysis.cve-backport-codegen-dataset
CVE Backport Code Generation Dataset
Per-hunk code generation dataset for CVE security patch backporting, derived from openSUSE Build Service maintenance patches.
Task
Given a region of vulnerable source code and a description of the upstream CVE fix, the model outputs the fixed version of the code. A programmatic diff then produces the final patch. This plays to LLM strengths in code completion and avoids format-sensitivity issues with direct diff generation.… See the full description on the dataset page: https://huggingface.co/datasets/openSUSE/cve-backport-codegen-dataset.cve2All-CVE-Chat-MultiTurn-1999-2025-Dataset
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/ukcli/All-CVE-Chat-MultiTurn-1999-2025-Dataset.nvd-cve-scraper
NVD CVE Scraper · Vulnerabilities, CVSS Scores, Vendors & CWEs
Scrape National Vulnerability Database (NVD) CVE records, CVSS v2/v3/v4 severity scores, CWE weakness classifications, vendor products, and exploit references.
Rows in this dataset
1,403
Fields
19
Collector runs behind it
36
Most recent observation
2026-08-03
What this is
Every row here was returned by a real run of a public collector. Nothing is generated from a
template over… See the full description on the dataset page: https://huggingface.co/datasets/reapxdev/nvd-cve-scraper.cve-2026-recent
CVE 2026 — Maximum Severity (CVSS 10.0), GitHub-hosted patches
CVEs published between 2026-07-15 and 2026-09-15 with a CVSS base score of 10.0
(the maximum possible), sourced from the NVD API 2.0,
filtered to the 13 whose fix is a resolvable GitHub commit — enough to git clone the
repo and check out the exact pre- and post-patch states yourself.
Fields
field
description
cve_id
CVE identifier
cwes
list of CWE IDs associated with the CVE
description… See the full description on the dataset page: https://huggingface.co/datasets/rufimelo/cve-2026-recent.nvd-cve-rag-dataset
NVD CVE RAG Dataset
Dataset Summary
This dataset contains cleaned NVD CVE records and synthetic query-document pairs prepared for bi-encoder fine-tuning and retrieval evaluation in a RAG pipeline.
It includes:
A cleaned CVE document corpus used as the retrieval corpus.
Synthetic training pairs for bi-encoder fine-tuning.
Synthetic validation pairs for validation loss monitoring and early stopping.
Synthetic test pairs for retrieval evaluation before and after… See the full description on the dataset page: https://huggingface.co/datasets/ubco-mds-2025-capstone-fujitsu-1/nvd-cve-rag-dataset.CVEs
CVEs — a full-coverage CVE chat dataset
1,625,017 chat conversations covering all 361,190 usable CVEs (1999–2026), built for fine-tuning cybersecurity assistants. Every known CVE in the official CVE List with severity enrichment from NVD (via the fkie-cad community feeds), rendered as English user/assistant conversations with varied phrasings, honest handling of missing data, and a per-CVE 99/1 train/validation split with zero leakage.
The schema matches oi-uae/cyber-security… See the full description on the dataset page: https://huggingface.co/datasets/oi-uae/CVEs.All-CVE-Records-Training-Dataset
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/ukcli/All-CVE-Records-Training-Dataset.CISA_Enrichment
CISA Known Exploited Vulnerabilities Catalog Enrichment
The CISA recently started to publish the Known Exploited Vulnerabilities Catalog Enrichment to help federal agencies keep up with exploited vulnerabilities.
The data they provide is minimal, so I have built this jupyter notebook to enrich the data using the CIRCL public CVE API to add the following data points:
CWE
CVE Published Date
CVE Modified Date
Reference URLs
CPE 2.3 Data
A Github Action runs every 6 hours and updates… See the full description on the dataset page: https://huggingface.co/datasets/cvelist/CISA_Enrichment.security-cveDataset Card for security-cve
Dataset Description
The security-cve dataset is a cleaned and optimized version of the original ReposVul dataset, a high-quality collection of 6,134 CVE entries across 1,491 projects in C, C++, Java, and Python. It provides multi-granularity vulnerability information, from repository-level to line-level. The cleaning process enhanced data quality, making it suitable for training and evaluating machine learning models for vulnerability detection.
Data Structure… See the full description on the dataset page: https://huggingface.co/datasets/whywhywhywhy/security-cve.