arXiv AI
2d ago

Can Agentic Code Review Catch Vulnerabilities Before They Are Merged?

The paper introduces SecPRBench, a benchmark that evaluates large language model agents on real-world bug‑introducing commits from critical software systems such as Firefox, V8, and OpenSSL. It automates harvesting, building, and validating these commits, and uses an LLM‑as‑a‑judge to match findings with ground‑truth vulnerabilities. Across eight state‑of‑the‑art models, recall ranges from 32.5% to 78.1%, with Grok 4.6 and GPT‑6 sol performing best, while security‑focused harnesses like OpenAI’s Codex Security and Anthropic’s Defending Code influence recall differently.

By Yihan Yang, Chenyuan Yang, Zijie Zhao, Anh Nguyen Hoang, Ziqi Zhang, Weidong Wang, Zhiheng Lyu, Lingming Zhang
arXiv AI
Jul 14

SWE-MERA: A Dynamic Benchmark for Agenticly Evaluating Large Language Models on Software Engineering Tasks

arXiv:2507. 11059v3 Announce Type: replace-cross Abstract: The rapid advancement of Large Language Models (LLMs) in software engineering has revealed critical limitations in existing benchmarks, particularly the widely used SWE-bench dataset.

By Pavel Adamenko, Mikhail Ivanov, Aidar Valeev, Rodion Levichev, Pavel Zadorozhny, Ivan Lopatin, Dmitry Babaev, Alena Fenogenova, Valentin Malykh
arXiv AI
Oct 12

HAFixAgent: History-Aware Agentic Program Repair

HAFixAgent is a history-aware program repair agent that incorporates blame-derived repository context into its repair loop. In a large-scale study on 854 Defects4J and 501 BugsInPy bugs, the agent’s best history heuristic improved repair rates by up to +64.3% with weaker models and outperformed existing agents by significant margins. The three complementary history heuristics together repair more bugs than any single heuristic, with only modest increases in agent steps or tokens.

By Yu Shi, Hao Li, Bram Adams, Ahmed E. Hassan