{"id":"https://openalex.org/W7161688020","doi":"https://doi.org/10.48550/arxiv.2605.17444","title":"MemRepair: Hierarchical Memory for Agentic Repository-Level Vulnerability Repair","display_name":"MemRepair: Hierarchical Memory for Agentic Repository-Level Vulnerability Repair","publication_year":2026,"publication_date":"2026-05-17","ids":{"openalex":"https://openalex.org/W7161688020","doi":"https://doi.org/10.48550/arxiv.2605.17444"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17444","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17444","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17444","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085020097","display_name":"Simiao Liu","orcid":"https://orcid.org/0000-0001-8012-7973"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Simiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136467342","display_name":"Li Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136457598","display_name":"Fang Liu","orcid":"https://orcid.org/0009-0000-0653-0692"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Fang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136460791","display_name":"Xiaoli Lian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lian, Xiaoli","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136488896","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-8248-8542"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136496261","display_name":"Yinghao Zhu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Yinghao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.31839999556541443,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.31839999556541443,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.17180000245571136,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.12870000302791595,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6550999879837036},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6438999772071838},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.45190000534057617},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4244999885559082},{"id":"https://openalex.org/keywords/code-reuse","display_name":"Code reuse","score":0.3799999952316284},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3650999963283539}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7694000005722046},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6550999879837036},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6438999772071838},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.45190000534057617},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4244999885559082},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.3799999952316284},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3650999963283539},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.358599990606308},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33320000767707825},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32589998841285706},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.32519999146461487},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.3052999973297119},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.2727999985218048}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17444","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17444","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17444","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17444","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land","score":0.4102531969547272}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Modern":[0],"software":[1],"ecosystems":[2],"face":[3],"a":[4,47,58,62,87,113],"rapidly":[5],"growing":[6],"number":[7],"of":[8,165,172,213],"disclosed":[9],"vulnerabilities,":[10],"increasing":[11],"the":[12,52,121,162,190,211],"need":[13],"for":[14,35,65],"automated":[15,36],"repair":[16,38,45,82,94,126,154,198,206,216],"techniques":[17],"that":[18,91,203],"can":[19,208],"operate":[20],"reliably":[21],"at":[22],"repository":[23,221],"scale.":[24],"Although":[25],"Large":[26],"Language":[27],"Model":[28],"(LLM)-based":[29],"agents":[30,181],"have":[31],"recently":[32],"shown":[33],"promise":[34],"vulnerability":[37,93,153,215],"(AVR),":[39],"most":[40],"existing":[41],"systems":[42],"still":[43],"treat":[44],"as":[46,95,183,187,189],"single":[48],"generation":[49],"step":[50],"over":[51],"currently":[53],"visible":[54],"code":[55],"context.":[56],"As":[57],"result,":[59],"they":[60],"lack":[61],"persistent":[63],"mechanism":[64],"reusing":[66],"prior":[67,134],"fixes":[68],"or":[69],"learning":[70],"from":[71],"failed":[72],"validation":[73],"attempts,":[74],"which":[75],"limits":[76],"their":[77],"effectiveness":[78],"on":[79,143,149],"complex,":[80],"multi-file":[81],"tasks.":[83],"We":[84,146],"present":[85],"MemRepair,":[86],"memory-augmented":[88],"agentic":[89,214],"framework":[90],"formulates":[92],"an":[96],"iterative,":[97],"experience-driven":[98],"process.":[99],"MemRepair":[100,148,167],"combines":[101],"three":[102,150],"complementary":[103],"memory":[104,207],"layers,":[105],"i.e.,":[106],"History-Fix,":[107],"Security-Pattern,":[108],"and":[109,132,161,175,185,220],"Refinement-Trajectory":[110],"memories,":[111],"with":[112],"dynamic":[114],"feedback-driven":[115],"refinement":[116],"loop.":[117],"This":[118],"design":[119],"allows":[120],"agent":[122],"to":[123,137],"retrieve":[124],"repository-specific":[125],"conventions,":[127],"apply":[128],"reusable":[129],"security":[130],"defenses,":[131],"exploit":[133],"\"failure-to-success\"":[135],"trajectories":[136],"revise":[138],"semantically":[139],"invalid":[140],"patches":[141],"based":[142],"runtime":[144],"evidence.":[145],"evaluate":[147],"representative":[151],"repository-level":[152],"benchmarks:":[155],"SEC-Bench,":[156],"PatchEval":[157],"(Python,":[158],"Go,":[159],"JavaScript),":[160],"C++":[163],"subset":[164],"Multi-SWE-bench.":[166],"achieves":[168],"state-of-the-art":[169],"resolution":[170],"rates":[171],"58.0%,":[173],"58.2%,":[174],"30.58%,":[176],"respectively,":[177],"outperforming":[178],"strong":[179],"general-purpose":[180],"such":[182],"OpenHands":[184],"SWE-agent,":[186],"well":[188],"specialized":[191],"AVR":[192],"tool":[193],"InfCode-C++,":[194],"while":[195],"maintaining":[196],"competitive":[197],"cost.":[199],"These":[200],"results":[201],"show":[202],"persistent,":[204],"hierarchical":[205],"substantially":[209],"improve":[210],"reliability":[212],"across":[217],"diverse":[218],"languages":[219],"settings.":[222]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-20T00:00:00"}