{"id":"https://openalex.org/W7154229978","doi":"https://doi.org/10.48550/arxiv.2604.10767","title":"VulWeaver: Weaving Broken Semantics for Grounded Vulnerability Detection","display_name":"VulWeaver: Weaving Broken Semantics for Grounded Vulnerability Detection","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W7154229978","doi":"https://doi.org/10.48550/arxiv.2604.10767"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.10767","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.10767","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.10767","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101821319","display_name":"Yuhua Cao","orcid":"https://orcid.org/0009-0007-6101-8270"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cao, Yiheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124064925","display_name":"Yihao Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yihao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133589320","display_name":"Xin Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Xin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133606805","display_name":"Bihuan Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Bihuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133583520","display_name":"Jiayi Deng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Deng, Jiayi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109404532","display_name":"Zhuotong Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Zhuotong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073610803","display_name":"Susheng Wu","orcid":"https://orcid.org/0009-0005-2169-7032"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Susheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073898228","display_name":"Yiheng Huang","orcid":"https://orcid.org/0009-0003-4722-3658"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Yiheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133567660","display_name":"Xueying Du","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Du, Xueying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042064712","display_name":"Xingman Chen","orcid":"https://orcid.org/0000-0002-7120-9261"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Xingman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008439388","display_name":"Miaohua Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Miaohua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133566635","display_name":"Xin Peng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peng, Xin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.5188999772071838,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.5188999772071838,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.15309999883174896,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.10589999705553055,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5830000042915344},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5806999802589417},{"id":"https://openalex.org/keywords/program-slicing","display_name":"Program slicing","score":0.5640000104904175},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.5307999849319458},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.5149000287055969},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.4278999865055084},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.420199990272522},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.40860000252723694},{"id":"https://openalex.org/keywords/dependency-graph","display_name":"Dependency graph","score":0.4065000116825104},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3637000024318695}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7700999975204468},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5830000042915344},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5806999802589417},{"id":"https://openalex.org/C91071405","wikidata":"https://www.wikidata.org/wiki/Q1413145","display_name":"Program slicing","level":3,"score":0.5640000104904175},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.5307999849319458},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.5149000287055969},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4278999865055084},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4277999997138977},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.420199990272522},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.40860000252723694},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.4065000116825104},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4016000032424927},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3937999904155731},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3763999938964844},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3637000024318695},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.35910001397132874},{"id":"https://openalex.org/C156325361","wikidata":"https://www.wikidata.org/wiki/Q1152864","display_name":"Grounded theory","level":3,"score":0.3562000095844269},{"id":"https://openalex.org/C138147947","wikidata":"https://www.wikidata.org/wiki/Q1183659","display_name":"Declaration","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.352400004863739},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3384000062942505},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.3352999985218048},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.32690000534057617},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.32409998774528503},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32120001316070557},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3118000030517578},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.2921000123023987},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.28459998965263367},{"id":"https://openalex.org/C118930307","wikidata":"https://www.wikidata.org/wiki/Q600590","display_name":"Tuple","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C171268870","wikidata":"https://www.wikidata.org/wiki/Q1486676","display_name":"GRASP","level":2,"score":0.2587999999523163}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.10767","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.10767","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.10767","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.10767","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Detecting":[0],"vulnerabilities":[1,210,233],"in":[2,156,178,234],"source":[3],"code":[4,181],"remains":[5],"critical":[6],"yet":[7],"challenging,":[8],"as":[9],"conventional":[10],"static":[11,77],"analysis":[12,78],"tools":[13],"construct":[14],"inaccurate":[15],"program":[16,44,91],"representations,":[17],"while":[18],"existing":[19],"LLM-based":[20,39,72],"approaches":[21],"often":[22],"miss":[23],"essential":[24],"vulnerability":[25,52,56,84,107],"context":[26,53,85],"and":[27,49,99,140,148,154,221],"lack":[28],"grounded":[29,55],"reasoning.":[30],"In":[31,226],"this":[32],"paper,":[33],"we":[34],"introduce":[35],"VulWeaver,":[36],"a":[37,133,162],"novel":[38],"approach":[40],"that":[41,130],"weaves":[42],"broken":[43],"semantics":[45],"into":[46],"accurate":[47],"representations":[48],"extracts":[50,82],"holistic":[51,83],"for":[54,122],"detection.":[57],"VulWeaver":[58,103,131,160,185,206,229],"first":[59],"constructs":[60],"an":[61,199,235],"enhanced":[62],"unified":[63],"dependency":[64],"graph":[65],"(UDG)":[66],"by":[67,86,151,219],"integrating":[68],"deterministic":[69],"rules":[70],"with":[71,93,106,195,216],"semantic":[73],"inference":[74],"to":[75,112],"address":[76],"inaccuracies.":[79],"It":[80],"then":[81],"combining":[87],"explicit":[88],"contexts":[89],"from":[90,182],"slicing":[92],"implicit":[94],"contexts,":[95],"including":[96],"usage,":[97],"definition,":[98],"declaration":[100],"information.":[101],"Finally,":[102],"employs":[104],"meta-prompting":[105],"type":[108],"specific":[109],"expert":[110],"guidelines":[111],"steer":[113],"LLMs":[114],"through":[115],"systematic":[116],"reasoning,":[117],"aggregated":[118],"via":[119],"majority":[120],"voting":[121],"robustness.":[123],"Extensive":[124],"experiments":[125],"on":[126,190],"PrimeVul4J":[127],"dataset":[128,194],"show":[129],"achieves":[132],"precision":[134],"of":[135,138,142,165,201],"0.82,":[136],"recall":[137],"0.71,":[139],"F1-score":[141,200],"0.76,":[143],"outperforming":[144],"state-of-the-art":[145],"learning-based,":[146],"LLM-based,":[147],"agent-based":[149],"baselines":[150],"25%,":[152],"17%,":[153],"21%":[155],"F1-score,":[157],"respectively.":[158],"Notably,":[159],"attains":[161],"VP-S":[163],"score":[164],"0.58,":[166],"164%":[167],"higher":[168],"than":[169],"the":[170,191],"best":[171],"baseline,":[172],"confirming":[173],"its":[174],"strong":[175],"discriminative":[176],"power":[177],"distinguishing":[179],"vulnerable":[180],"patched":[183],"counterparts.":[184],"also":[186],"demonstrates":[187],"cross-language":[188],"generalizability":[189],"C/C++":[192],"PrimeVul":[193],"minimal":[196],"adaptation,":[197],"achieving":[198],"0.78.":[202],"For":[203],"practical":[204],"usefulness,":[205],"detected":[207],"26":[208],"true":[209],"across":[211],"9":[212],"real-world":[213],"Java":[214],"projects,":[215],"15":[217],"confirmed":[218,232],"developers":[220],"5":[222],"CVE":[223],"identifiers":[224],"assigned.":[225],"industrial":[227],"deployment,":[228],"identified":[230],"40":[231],"internal":[236],"repository.":[237]},"counts_by_year":[],"updated_date":"2026-07-17T05:52:16.776730","created_date":"2026-04-15T00:00:00"}