datasets
Training and evaluation data, with the modality, task and licence stated up front. Listed live from the Hugging Face Hub.
cve-proof-corpus
CVE Proof Corpus
Six real vulnerability classes, each with a machine-checkable proof that the shipped fix
eliminates it — and a checker that shares no code with whatever produced the proof.
Every record carries the safety relation, the guard the upstream project shipped, the declared
attacker domain, and the nonnegative multipliers that prove the guard implies safety. All six verify.
pip install "certkit@git+https://github.com/nickharris808/certkit@main"
python verify.py… See the full description on the dataset page: https://huggingface.co/datasets/nickh007/cve-proof-corpus.cvefixes
CVEfixes Security Vulnerabilities Dataset
Security vulnerability data from CVEfixes v1.0.8 with 12,987 vulnerability fix records across 11,726 unique CVEs and 4,205 repositories.
Contains CVE metadata (descriptions, CVSS scores, CWE classifications), git commit data, and code diffs showing vulnerable vs fixed code.
Usage
from datasets import load_dataset
dataset = load_dataset("hitoshura25/cvefixes")
Citation
If you use this dataset, please cite the original… See the full description on the dataset page: https://huggingface.co/datasets/hitoshura25/cvefixes.cve-and-cwe-dataset-1999-2025This collection brings together every Common Vulnerabilities & Exposures (CVE) entry published in the National Vulnerability Database (NVD) from the very first identifier — CVE-1999-0001 — through all records available on 30 May 2025.
It was built automatically with a Python script that calls the NVD REST API v2.0 page-by-page, handles rate-limits, and filters data.
After download each CVE object is pared down to the essentials and written to CVE_CWE_2025.csv with the following columns:… See the full description on the dataset page: https://huggingface.co/datasets/stasvinokur/cve-and-cwe-dataset-1999-2025.cvefixes-security-ir-graphrag
CVEfixes Security IR GraphRAG
This is a content-addressed, remotely routable Security IR release of the exact pinned CVEfixes snapshot. It packages the byte-identical original Parquet data together with a searchable corpus, BM25 postings, CUDA-generated vectors, typed graph nodes and edges, bounded adjacency indexes, and a source-CID-to-original-row lookup.
All entries are inert, non-authoritative evidence. Candidate and formal-logic rows cannot grant execution authority; exact… See the full description on the dataset page: https://huggingface.co/datasets/Publicus/cvefixes-security-ir-graphrag.mitre-stix-cve-exploitdb-dataset-alpaca-chatml-harmony
MITRE+NVD+ExploitDB Dataset (Alpaca/ChatML/Harmony)
A dataset for training AI assistants/agents on vulnerability analysis and pentesting Q&A. It is built by the pentestds pipeline, which fetches and merges data from MITRE CVE, NVD (CVSS enrichment), ExploitDB, and a small set of HuggingFace datasets. Provenance is recorded for every entry, and the pipeline emits Alpaca, ChatML, and Harmony JSONL files.
Dataset Summary
This dataset is designed for training AI agents to… See the full description on the dataset page: https://huggingface.co/datasets/jason-oneal/mitre-stix-cve-exploitdb-dataset-alpaca-chatml-harmony.cvevc_commits
Dataset Card for Dataset Name
This dataset card aims to be a base template for new datasets. It has been generated using this raw template.
Dataset Details
Dataset Description
Curated by: [More Information Needed]
Funded by [optional]: [More Information Needed]
Shared by [optional]: [More Information Needed]
Language(s) (NLP): [More Information Needed]
License: [More Information Needed]
Dataset Sources [optional]
Repository: [More… See the full description on the dataset page: https://huggingface.co/datasets/andstor/cvevc_commits.All-CVE-Records-Training-Dataset
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/AlicanKiraz0/All-CVE-Records-Training-Dataset.CVEfixes_v1.0.8
CVEfixes Data Splits README
This repository contains data splits derived from the CVEfixes_v1.0.8 dataset, an automated collection of vulnerabilities and their fixes from open-source software. The dataset has been processed and split into training, validation, and test sets to facilitate machine learning and vulnerability analysis tasks. Below, you’ll find details about the splits, problematic CVEs excluded due to memory constraints, and a comprehensive guide on how to recreate… See the full description on the dataset page: https://huggingface.co/datasets/starsofchance/CVEfixes_v1.0.8.cve_train
CVE-Factory Agent Traces
This dataset contains 4,078 distilled agent traces from 887 CVE reproduction tasks (the trainset/ split), generated using Claude Opus 4.5 with a Mini SWE-Agent harness. See CVE-Factory for the full pipeline.
Note: CVE-Factory also provides a trainset-2/ split with additional simpler tasks, which is not included in this training dataset.
🚀 Training Results
Fine-tuning on this dataset yields dramatic improvements across security benchmarks:… See the full description on the dataset page: https://huggingface.co/datasets/Luoberta/cve_train.linux-cve-dossiers
Linux CVE Dossier Corpus
A scope-audited corpus of per-CVE research dossiers for 11 Linux base-system
packages: Linux kernel, glibc, musl, systemd, util-linux, coreutils, BusyBox,
OpenSSL, curl, Node.js, and CPython. Each dossier carries a summary,
dated timeline, patch lineage, exploit notes, and reference harvest, plus
a structured export that downstream consumers can use without re-parsing the
markdown.
Splits
in_scope (1,418 records): scope-audited dossiers for the… See the full description on the dataset page: https://huggingface.co/datasets/mjbommar/linux-cve-dossiers.cve_train_v1.1
CVE-Factory Agent Traces v1.1
This dataset is an expanded version of cve_train, containing 18,783 distilled agent traces for CVE reproduction tasks. The traces were generated using Claude Opus 4.5 with a Mini SWE-Agent harness through the CVE-Factory pipeline.
What's New in v1.1
Compared to cve_train (v1.0):
18.8k total samples (up from ~4k in v1.0)
+3k agentic tasks from cve_tasks_3k_compressed
Additional traces from expanded CVE task coverage
Training… See the full description on the dataset page: https://huggingface.co/datasets/Luoberta/cve_train_v1.1.cve-cwe-consensus
CVE-to-CWE Consensus Dataset
A multi-label dataset mapping CVE vulnerability descriptions to their CWE weakness type(s), built for fine-tuning instruction-tuned LLMs (e.g. with Unsloth). Each label is a consensus assignment: a CWE is kept only when NVD and the CVE Numbering Authority (CNA) independently agree on it, after rolling both up to CWE View-1003 (the ~130-weakness "Weaknesses for Simplified Mapping of Published Vulnerabilities").
TL;DR
Task: given a CVE… See the full description on the dataset page: https://huggingface.co/datasets/exploitintel/cve-cwe-consensus.cvebenchkepler-arc-agi-3-traces
Kepler 1.0 ARC-AGI-3 trace corpus
Run artifacts from Kepler 1.0, an open-source agent harness for the 25 public
ARC-AGI-3 games. A stock CLI coding agent
encodes its theory of each game as an executable world_model.py, certifies it
against the full recorded interaction history, plans inside the certified
model, and acts through a guarded channel that voids the plan on the first
misprediction.
Project page ·
Code ·
Paper ·
Integrity record
The canonical release contains two… See the full description on the dataset page: https://huggingface.co/datasets/cveinnt/kepler-arc-agi-3-traces.cvebench_full
CVE NPD Benchmark (cvebench_full)
A benchmark of 128 null-pointer-dereference (NPD) vulnerabilities derived from real CVE fix commits. Each sample is an LLM-generated vulnerable reimplementation of a function whose NPD bug was fixed in a public CVE patch. The vulnerabilities are confirmed by a blind LLM judge and by patching the attacker's code into the real repo and passing the original test suite.
Motivation
Existing vulnerability detection benchmarks either use… See the full description on the dataset page: https://huggingface.co/datasets/AryaWu/cvebench_full.cve-impacts
Image generated by DALL-E.
CVE_KeyPhrases
CVE_KeyPhrases is a dataset of published CVEs with the Key Risk Phrases (for Impact, Weakness, Attack) extracted.
It is released under license": "cc-by-sa-4.0"
Please see the BSides Dublin 2024 presentation video and deck.
The dataset includes:
~230K published CVEs (excluding those marked Rejected) i.e. all CVEs up to April 3 2024 NVD Published date.
The CVE ID, Description text, and Key Risk Phrases
As of April 2024… See the full description on the dataset page: https://huggingface.co/datasets/yahoo-inc/cve-impacts.CVEFixes
Dataset Card for "CVEFixes"
Original Paper: https://www.sciencedirect.com/science/article/abs/pii/S0167739X24004680
bibtex
@article{TRAN2024107504,
title = {DetectVul: A statement-level code vulnerability detection for Python},
journal = {Future Generation Computer Systems},
pages = {107504},
year = {2024},
issn = {0167-739X},
doi = {https://doi.org/10.1016/j.future.2024.107504},
url = {https://www.sciencedirect.com/science/article/pii/S0167739X24004680},
author = {Hoai-Chau Tran… See the full description on the dataset page: https://huggingface.co/datasets/DetectVul/CVEFixes.Cybersecurity-LLM-CVE2025.06.07 Updated data code :https://github.com/Bouquets-ai/Data-Processing/blob/main/CVE-Data.py
Change 121 lines of code (keyword="CVE-2025") to obtain the required CVE time
93 lines of code (json record=) to change the required format
Cybersecurity-LLM-CVE Dataset Introduction 🚀
Overview 🛡️
An open-source cybersecurity vulnerability dataset designed for training/evaluating Large Language Models (LLMs) in security domains. Covers all public CVE IDs from January 1, 2021 to April 9, 2025… See the full description on the dataset page: https://huggingface.co/datasets/Bouquets/Cybersecurity-LLM-CVE.All-CVE-Chat-MultiTurn-1999-2025-Dataset
CVE Chat‑Style Multi‑Turn Cybersecurity Dataset (1999 – 2025)
1. Project Overview
This repository hosts the largest publicly available chat‑style, multi‑turn cybersecurity dataset to date, containing ≈ 300 000 Common Vulnerabilities and Exposures (CVE) records published between 1999 and 2025. Each record has been meticulously parsed, enriched, and converted into a conversational format that is ideal for training and evaluating AI and AI‑Agent systems focused on… See the full description on the dataset page: https://huggingface.co/datasets/Trendyol/All-CVE-Chat-MultiTurn-1999-2025-Dataset.cve-to-cwe
CVE-to-CWE + ATT&CK Classification Dataset
A dataset for mapping CVE (Common Vulnerabilities and Exposures) descriptions to CWE (Common Weakness Enumeration) categories and MITRE ATT&CK techniques. Built from the National Vulnerability Database (NVD) with AI-assisted label refinement.
Tasks
CVE → CWE classification (single-label, 205 classes) — map vulnerability description to weakness type
CVE → ATT&CK technique mapping (multi-label, 361 techniques) — map vulnerability… See the full description on the dataset page: https://huggingface.co/datasets/xamxte/cve-to-cwe.cvefixes_bigvulaikyatansinha_cybersecurity-cves-for-nlp-dataset
Cybersecurity CVEs for NLP Dataset
Every CVE since 1999, scrubbed and perfectly formatted for NLP tasks
Dataset Info
Source: Kaggle
Original Size: 38.28 MB
Kaggle Downloads: 36
Files: 1
Files
NVD_Cybersecurity_Dataset.csv
Mirrored from Kaggle
CVE_Vulnerailities_Detailedcve-sft-v5
CVE SFT Dataset v5
CVE SFT Dataset v5 is a structured instruction-following dataset for fine-tuning language models on cybersecurity vulnerability analysis. Built by Auren Research, it combines authoritative vulnerability metadata from the NIST National Vulnerability Database (NVD) with five generated fields that teach models to explain, reason about, and remediate real-world CVEs — including side-by-side vulnerable vs. safe code examples.Unlike most security… See the full description on the dataset page: https://huggingface.co/datasets/auren-research/cve-sft-v5.cve-to-metasploit-module
CVE To Metasploit Module Prompt
This dataset is a submodule to the overall project to create an LLM that can look at newly published CVE writeups and create metasploit modules. The main repo for the project can be found here.
Usage
TO-DO
References
TO-DO
2021_2026_CVE_Exploit_DatasetThis dataset contains CVE exploit explanation between 2021 and 2026. Dataset contains this columns:
cve_id: Id of CVE
description_en: Exploit explanation in English
cwe: Common Weakness Enumeration
severity: Severity of exploit
base_score: Base score
published: Published date
cvevc_candidates
Dataset Card for Dataset Name
This dataset card aims to be a base template for new datasets. It has been generated using this raw template.
Dataset Details
Dataset Description
Curated by: [More Information Needed]
Funded by [optional]: [More Information Needed]
Shared by [optional]: [More Information Needed]
Language(s) (NLP): [More Information Needed]
License: [More Information Needed]
Dataset Sources [optional]
Repository: [More… See the full description on the dataset page: https://huggingface.co/datasets/andstor/cvevc_candidates.cve_backport_bench_1cve-allcyber-cve2cwe-extension
cyber-cve2cwe-extension
Overview
The CVE-to-CWE classification task suffers from low macro-averaged F1 scores because many CWE categories appear only a handful of times in the training data. This dataset supplies additional examples for 36 low-frequency (tail) CWE classes with the aim of improving model performance on those categories and providing a reproducible record of how the training data for the companion model was extended. It is intended as a transparency… See the full description on the dataset page: https://huggingface.co/datasets/luca-software-developer/cyber-cve2cwe-extension.