datasets
Training and evaluation data, with the modality, task and licence stated up front. Listed live from the Hugging Face Hub.
software_vulnerabilities_dataset
Cybersecurity Vulnerabilities Dataset
Overview
This dataset, vulnerabilities.jsonl, is a comprehensive collection of 1000 common software vulnerabilities across multiple programming languages, designed for use in cybersecurity research, penetration testing, and secure coding education.
Each entry details a specific vulnerability, including its type, description, code snippet, exploitation techniques, and mitigation strategies.
The dataset is structured in JSON Lines… See the full description on the dataset page: https://huggingface.co/datasets/darkknight25/software_vulnerabilities_dataset.vuljector-extracted-vulnerabilities
Vuljector Extracted Vulnerabilities
This dataset is an export of the current Vuljector experiment artifacts.
Files:
produced_vulnerabilities.jsonl: one row per successfully produced injection attempt
verified_poc_successes.jsonl: one row per successful guided-PoC validation attempt
summary.json: aggregate counts
Current aggregate counts:
produced rows: 91
verified rows: 195
deduped unique valid cases: 267
Notes:
Counts are derived from all run artifacts under runs/injection… See the full description on the dataset page: https://huggingface.co/datasets/MananSuri27/vuljector-extracted-vulnerabilities.vuljector-extracted-vulnerabilities
Vuljector Extracted Vulnerabilities
This dataset is an export of the current Vuljector experiment artifacts.
Files:
produced_vulnerabilities.jsonl: one row per successfully produced injection attempt
verified_poc_successes.jsonl: one row per successful guided-PoC validation attempt
summary.json: aggregate counts
Current aggregate counts:
produced rows: 91
verified rows: 195
deduped unique valid cases: 267
Notes:
Counts are derived from all run artifacts under runs/injection… See the full description on the dataset page: https://huggingface.co/datasets/smtpsrvs/vuljector-extracted-vulnerabilities.agent-skill-vulnerabilities
Agent Skill Vulnerability Scenarios (defanged, teaching)
from datasets import load_dataset
ds = load_dataset("fevziegeyurtsevenler/agent-skill-vulnerabilities")
Deliberately-vulnerable, defanged agent-extension artifacts — for training detectors & hands-on learning.
Schema
column
meaning
id
scenario
artifact_type
SKILL.md / mcp.json
content, walkthrough
artifact + defense
Related AltaySec resources
🕵️ uncloak scanner:… See the full description on the dataset page: https://huggingface.co/datasets/fevziegeyurtsevenler/agent-skill-vulnerabilities.redteam-vulnerabilities
OWASP Agentic 2026 Security Vulnerabilities Dataset v1.0.0
Combined red teaming benchmark dataset covering OWASP Agentic, OWASP LLM, fairness, liability, and content policy vulnerabilities
Overview
This dataset contains 819 adversarial conversation samples designed to test AI agent robustness against attacks from the OWASP Agentic AI Threats and Mitigations.
Included Vulnerabilities
Vulnerability
Description
Samples
bias
Unfair or Biased Content
20… See the full description on the dataset page: https://huggingface.co/datasets/orq/redteam-vulnerabilities.Cloud_Vulnerabilities_DatasetCloud Vulnerabilities Dataset (VUL0001-VUL1200)
Overview
The Cloud Vulnerabilities Dataset is a comprehensive collection of 1200 unique cloud security vulnerabilities, covering major cloud providers including AWS, Azure, Google Cloud Platform (GCP), Oracle Cloud, IBM Cloud, and Alibaba Cloud. This dataset is designed for cybersecurity professionals, penetration testers, machine learning engineers, and data scientists to analyze, train AI models, and enhance cloud security practices. Each entry… See the full description on the dataset page: https://huggingface.co/datasets/darkknight25/Cloud_Vulnerabilities_Dataset.x23-solidity-vulnerabilities-audit-findings
X23 Vulnerability Dataset
The X23 Vulnerability Dataset is a normalized corpus of public smart-contract security audit findings, focused mostly on Solidity and EVM-based protocols. It includes deduplicated vulnerability findings extracted from public audit reports published between May 2019 and April 2026, with normalized titles, summaries, descriptions, severity/status/category fields, affected files/functions, remediation text, source report metadata, and attribution links where… See the full description on the dataset page: https://huggingface.co/datasets/daveytea/x23-solidity-vulnerabilities-audit-findings.ios-security-vulnerabilities-swift-objc
iOS Security Vulnerabilities Dataset (Swift & Objective-C)
A comprehensive dataset of 27 real-world iOS security vulnerability patterns in Swift and Objective-C, covering all OWASP Mobile Top 10 (2024) categories with vulnerable code, secure fixes, attack scenarios, and detection guidance.
🎯 Purpose
This is the first dedicated iOS/Swift/Objective-C security vulnerability dataset on Hugging Face. While existing datasets (TitanVul, DiverseVul, CleanVul) focus on… See the full description on the dataset page: https://huggingface.co/datasets/Arno-MHL/ios-security-vulnerabilities-swift-objc.solidity_errors_and_vulnerabilities
Solidity Vulnerabilities Dataset
📖 Overview
This dataset contains examples of common vulnerabilities in Solidity smart contracts, structured for use in Retrieval-Augmented Generation (RAG) systems.
It is intended to give LLMs context for:
Detecting vulnerabilities in Solidity code
Explaining security issues in simple terms
Suggesting fixes and mitigations
Assessing the severity of the issue
🗂 Data Format
Each entry is a JSON object with the… See the full description on the dataset page: https://huggingface.co/datasets/greatestyapper/solidity_errors_and_vulnerabilities.known_exploited_vulnerabilitiesAI_threat_and_vulnerabilities_taxonomy
AI Threat Taxonomy and Vulnerability Registry
Dataset Description
This dataset provides a practitioner-grade, machine-readable taxonomy of AI
threat vectors and AI vulnerabilities for use in red teaming, risk assessment,
model governance, and regulatory compliance programs.
The taxonomy distinguishes precisely between:
Threat vectors: paths or mechanisms an attacker, insider, or negligent
actor uses to exploit an AI environment
Vulnerabilities: weaknesses in… See the full description on the dataset page: https://huggingface.co/datasets/hewyler/AI_threat_and_vulnerabilities_taxonomy.smart-contract-vulnerabilitiesCommon-Vulnerabilities-Exposures-1995-2025Fork of: https://huggingface.co/datasets/AlicanKiraz0/All-CVE-Records-Training-Dataset/
synthetic-code-vulnerabilities-1synthetic-code-vulnerabilities-1 is a synthetic dataset with a total of ~493 Question and Answer pairs.
This dataset was generated using the following models:
Gemini:
Fast
Thinking
Pro
ChatGPT:
Whatever is available on the website
Deepseek:
"Instant"
"Expert"
Grok:
Fast
Qwen 3.6:
Fast
Thinking
Perplexity.ai:
Whatever is available on the website
This dataset follows the following format:
[
{"in":"Prompt","out":"Response"},
{"in":"Prompt","out":"Response"}
]
mirror-software_vulnerabilities_dataset
Cybersecurity Vulnerabilities Dataset
Overview
This dataset, vulnerabilities.jsonl, is a comprehensive collection of 1000 common software vulnerabilities across multiple programming languages, designed for use in cybersecurity research, penetration testing, and secure coding education.
Each entry details a specific vulnerability, including its type, description, code snippet, exploitation techniques, and mitigation strategies.
The dataset is structured in JSON… See the full description on the dataset page: https://huggingface.co/datasets/alucent/mirror-software_vulnerabilities_dataset.VAITP_Python_Vulnerabilities_F1vulnerabilitiesCVE ID,Severity (CVSS),Affected Software,Description,Mitigation,Citation
CVE-2024-34359,9.7 (Critical),llama-cpp-python (Python bindings for llama.cpp AI library),"Server-side template injection (SSTI) in Jinja2 template engine due to lack of sandboxing. Attackers can inject malicious templates in model metadata to execute arbitrary code, compromising AI systems and supply chains. Affects 6k+ Hugging Face models; exploited for RCE in AI apps.","Update to llama-cpp-python v0.2.72 or later;… See the full description on the dataset page: https://huggingface.co/datasets/ankitkushwaha90/vulnerabilities.solidity-defi-vulnerabilities
Solidity DeFi Vulnerabilities
Dataset Description
This dataset is collected from the following sources:
DeFiHackLabs (Head Commit: d951fa08a52c5651f9b3d9d7d919c996aebc0fa3)
DeFiVulnLabs (Head Commit: 37d095da5780f6ba49caad49f256d8bf654aca89)
It contains data related to various decentralized finance (DeFi) attack scenarios and vulnerabilities, including information about attack explanations, test cases, dates, token counts, interfaces, lost values, attack titles, and… See the full description on the dataset page: https://huggingface.co/datasets/seyyedaliayati/solidity-defi-vulnerabilities.synthetic-code-vulnerabilities-2synthetic-code-vulnerabilities-2 is a synthetic dataset with a total of ~884 Question and Answer pairs.
This dataset was generated using the following models:
ChatGPT:
Whatever is available on the website
OSS 120B
Gemini:
Pro
Deepseek:
"Instant"
"Expert"
Grok:
Fast
Qwen3:
Coder
This dataset follows the following format:
[
{"messages": [
{"role": "system", "content": "Example system prompt"},
{"role": "user", "content": "Example user prompt"},
{"role":… See the full description on the dataset page: https://huggingface.co/datasets/takenusername32/synthetic-code-vulnerabilities-2.cyber-vulnerabilities
Cyber Vulnerabilities Dataset
This dataset contains a collection of synthetic cybersecurity vulnerability descriptions designed for experimentation with AI systems that analyze and classify security threats.
The dataset was created for the Week 8 AI Engineering project, which demonstrates a multi-agent architecture combining Retrieval Augmented Generation (RAG), LLM reasoning, and ensemble prediction to estimate vulnerability severity.
Dataset Structure
Each record… See the full description on the dataset page: https://huggingface.co/datasets/stevemwas/cyber-vulnerabilities.vuln-remediation-vulnerabilities
Vulnerability Remediation Dataset
Synthetic enterprise vulnerability records for time-to-remediation survival analysis.
Schema
Column
Type
Description
vulnerability_id
string
Internal ID
cve_id
string
CVE identifier
discovery_date
date
First detected
remediation_date
date/null
Patch/fix date (null if open)
is_remediated
bool
Whether fixed within study window
duration_days
float
Days to remediation or censoring
event_observed
int
1=remediated… See the full description on the dataset page: https://huggingface.co/datasets/alirezaaminzadeh/vuln-remediation-vulnerabilities.filtered-vulnerabilitiesgo_vulnerabilities_2019_2024Raw vulnerability data collected using eyeballvul.
polyglot-redteam-vulnerabilitiesfiltered-vulnerabilitiessolidity_errors_and_vulnerabilities
Solidity Vulnerabilities Dataset
📖 Overview
This dataset contains examples of common vulnerabilities in Solidity smart contracts, structured for use in Retrieval-Augmented Generation (RAG) systems.
It is intended to give LLMs context for:
Detecting vulnerabilities in Solidity code
Explaining security issues in simple terms
Suggesting fixes and mitigations
Assessing the severity of the issue
🗂 Data Format
Each entry is a JSON object with the… See the full description on the dataset page: https://huggingface.co/datasets/xj210/solidity_errors_and_vulnerabilities.explained-priority-scored-contract-vulnerabilitiessmart-contract-vulnerabilities01Security_Vulnerabilitiesscan_vulnerabilities_dataset
dataset structure
{
"instruction": "Tech stack: Python Flask backend with SQLite database, using UUIDs for user identification. I observed that during user registration, the 'role' parameter is accepted from the form without server-side validation, and I can manipulate it in a POST request to /confirm-register. What vulnerability hypothesis does this indicate, and how can I confirm it?",
"response": {
"strategy": "The lack of server-side validation for the 'role'… See the full description on the dataset page: https://huggingface.co/datasets/anhnlq/scan_vulnerabilities_dataset.