PATCHEVAL: A New Benchmark for Evaluating LLMs on Patching Real-World Vulnerabilities
Paper • 2511.11019 • Published • 1
cve_id stringlengths 13 16 | cve_description stringlengths 60 2.06k | cwe_info unknown | repo stringlengths 26 68 | patch_url listlengths 1 6 | programing_language stringclasses 3
values | vul_func listlengths 1 5 | fix_func listlengths 1 9 | image_url stringlengths 49 52 |
|---|---|---|---|---|---|---|---|---|
CVE-2021-23376 | This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. | {
"CWE-78": {
"name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
"description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special el... | https://github.com/TRomesh/ffmpegdotjs | [
"https://github.com/TRomesh/ffmpegdotjs/commit/dae868764d6418dac081ed1aa84c636645ba6adb"
] | JavaScript | [
{
"id": "vul_js_21_1",
"commit": "b7395da",
"file_path": "index.js",
"start_line": 216,
"end_line": 233,
"snippet": " trimvideo: (input, start, duration, output) => {\n return new Promise(function(resolve, reject) {\n if (fs.existsSync(input)) {\n exec(\n `ffmpeg -hi... | [
{
"id": "fix_js_21_1",
"commit": "dae868764d6418dac081ed1aa84c636645ba6adb",
"file_path": "index.js",
"start_line": 216,
"end_line": 233,
"snippet": " trimvideo: (input, start, duration, output) => {\n return new Promise(function(resolve, reject) {\n if (fs.existsSync(input)) {\n ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2021-23376 |
CVE-2020-26215 | Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts... | {
"CWE-601": {
"name": "URL Redirection to Untrusted Site ('Open Redirect')",
"description": "The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect."
}
} | https://github.com/jupyter/notebook | [
"https://github.com/jupyter/notebook/commit/3cec4bbe21756de9f0c4bccf18cf61d840314d74"
] | Python | [
{
"id": "vul_py_47_1",
"commit": "d8308e13803ba1c6e92f129381e615af6c6e00d3",
"file_path": "notebook/base/handlers.py",
"start_line": 861,
"end_line": 863,
"snippet": " def get(self):\n self.redirect(self.request.uri.rstrip('/'))\n ",
"vul_localization": [
{
"pa... | [
{
"id": "fix_py_47_1",
"commit": "3cec4bbe21756de9f0c4bccf18cf61d840314d74",
"file_path": "notebook/base/handlers.py",
"start_line": 861,
"end_line": 867,
"snippet": " def get(self):\n path, *rest = self.request.uri.partition(\"?\")\n # trim trailing *and* leading /\n ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2020-26215 |
CVE-2022-1986 | OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9. | {
"CWE-94": {
"name": "Improper Control of Generation of Code ('Code Injection')",
"description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syn... | https://github.com/gogs/gogs | [
"https://github.com/gogs/gogs/commit/38aff73251cc46ced96dd608dab6190415032a82"
] | Go | [
{
"id": "vul_go_6_1",
"commit": "6982749",
"file_path": "internal/db/repo_editor.go",
"start_line": 468,
"end_line": 474,
"snippet": "func isRepositoryGitPath(path string) bool {\n\treturn strings.HasSuffix(path, \".git\") ||\n\t\tstrings.Contains(path, \".git\"+string(os.PathSeparator)) ||\... | [
{
"id": "fix_go_6_1",
"commit": "38aff73",
"file_path": "internal/db/repo_editor.go",
"start_line": 468,
"end_line": 476,
"snippet": "func isRepositoryGitPath(path string) bool {\n\treturn strings.HasSuffix(path, \".git\") ||\n\t\tstrings.Contains(path, \".git/\") ||\n\t\tstrings.Contains(pa... | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-1986 |
CVE-2024-25620 | Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative... | {
"CWE-73": {
"name": "External Control of File Name or Path",
"description": "The product allows user input to control or influence paths or file names that are used in filesystem operations."
},
"CWE-22": {
"name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
... | https://github.com/helm/helm | [
"https://github.com/helm/helm/commit/0d0f91d1ce277b2c8766cdc4c7aa04dbafbf2503"
] | Go | [
{
"id": "vul_go_16_2",
"commit": "e81f614",
"file_path": "pkg/chart/metadata.go",
"start_line": 87,
"end_line": 146,
"snippet": "func (md *Metadata) Validate() error {\n\tif md == nil {\n\t\treturn ValidationError(\"chart.metadata is required\")\n\t}\n\n\tmd.Name = sanitizeString(md.Name)\n\... | [
{
"id": "fix_go_16_1",
"commit": "0d0f91d",
"file_path": "pkg/chart/metadata.go",
"start_line": 19,
"end_line": 19,
"snippet": "\t\"path/filepath\""
},
{
"id": "fix_go_16_2",
"commit": "0d0f91d",
"file_path": "pkg/chart/metadata.go",
"start_line": 88,
"end_line": 152,... | ghcr.io/patcheval-cve/patcheval-cve:cve-2024-25620 |
CVE-2020-25459 | An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling. | {
"CWE-668": {
"name": "Exposure of Resource to Wrong Sphere",
"description": "The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource."
}
} | https://github.com/FederatedAI/FATE | [
"https://github.com/FederatedAI/FATE/commit/6feccf6d752184a6f9365d56a76fe627983e7139"
] | Python | [
{
"id": "vul_py_44_1",
"commit": "67708d5",
"file_path": "federatedml/tree/hetero/hetero_decision_tree_guest.py",
"start_line": 532,
"end_line": 544,
"snippet": " def sync_tree(self):\n LOGGER.info(\"sync tree to host\")\n\n self.transfer_inst.tree.remote(self.tree_,\n ... | [
{
"id": "fix_py_44_1",
"commit": "6feccf6",
"file_path": "federatedml/tree/hetero/hetero_decision_tree_guest.py",
"start_line": 544,
"end_line": 557,
"snippet": " def sync_tree(self):\n LOGGER.info(\"sync tree to host\")\n\n tree_nodes = self.remove_sensitive_info()\n ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2020-25459 |
CVE-2020-28494 | This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command that is then executed using child_process.spawn. The issue occurs because child_process.spawn is called with the option shell set to true and because the type pa... | {
"CWE-94": {
"name": "Improper Control of Generation of Code ('Code Injection')",
"description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syn... | https://github.com/totaljs/framework | [
"https://github.com/totaljs/framework/commit/6192491ab2631e7c1d317c221f18ea613e2c18a5"
] | JavaScript | [
{
"id": "vul_js_22_1",
"commit": "79e84ad",
"file_path": "image.js",
"start_line": 319,
"end_line": 340,
"snippet": "ImageProto.stream = function(type, writer) {\n\n\tvar self = this;\n\n\t!self.builder.length && self.minify();\n\n\tif (!type)\n\t\ttype = self.outputType;\n\n\tF.stats.perfor... | [
{
"id": "fix_js_22_1",
"commit": "6192491ab2631e7c1d317c221f18ea613e2c18a5",
"file_path": "image.js",
"start_line": 320,
"end_line": 341,
"snippet": "ImageProto.stream = function(type, writer) {\n\n\tvar self = this;\n\n\t!self.builder.length && self.minify();\n\n\tif (!type || !SUPPORTEDIMA... | ghcr.io/patcheval-cve/patcheval-cve:cve-2020-28494 |
CVE-2025-24806 | Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. If users are allowed to sign in via both username and email the regulation system treats these as separate login events. This leads to the regulation limitat... | {
"CWE-307": {
"name": "Improper Restriction of Excessive Authentication Attempts",
"description": "The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame."
}
} | https://github.com/authelia/authelia | [
"https://github.com/authelia/authelia/commit/d4a54189aa6563912f9427b96dcb01eacafa785c"
] | Go | [
{
"id": "vul_go_76_1",
"commit": "37cb14fb898b675bd39bbe8776f8cdf54f8272f3",
"file_path": "internal/handlers/handler_firstfactor.go",
"start_line": 14,
"end_line": 159,
"snippet": "func FirstFactorPOST(delayFunc middlewares.TimingAttackDelayFunc) middlewares.RequestHandler {\n\treturn func(c... | [
{
"id": "fix_go_76_1",
"commit": "d4a54189aa6563912f9427b96dcb01eacafa785c",
"file_path": "internal/handlers/handler_firstfactor.go",
"start_line": 15,
"end_line": 163,
"snippet": "func FirstFactorPOST(delayFunc middlewares.TimingAttackDelayFunc) middlewares.RequestHandler {\n\treturn func(c... | ghcr.io/patcheval-cve/patcheval-cve:cve-2025-24806 |
CVE-2023-22736 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6.0-rc4, are vulnerable to an authorization bypass bug which allows a malicious Argo CD user to deploy Applications outside the configured allowed namespaces. Reconciled Ap... | {
"CWE-862": {
"name": "Missing Authorization",
"description": "The product does not perform an authorization check when an actor attempts to access a resource or perform an action."
}
} | https://github.com/argoproj/argo-cd | [
"https://github.com/argoproj/argo-cd/commit/1f82078e7463228477e6c2cd959c14e7426c99d7",
"https://github.com/argoproj/argo-cd/commit/9b6815f06f0f58ecd7240999e6b32cf16ebd0d9e"
] | Go | [
{
"id": "vul_go_61_1",
"commit": "16f2de0",
"file_path": "./controller/appcontroller.go",
"start_line": 1771,
"end_line": 1791,
"snippet": "func (ctrl *ApplicationController) canProcessApp(obj interface{}) bool {\n\tapp, ok := obj.(*appv1.Application)\n\tif !ok {\n\t\treturn false\n\t}\n\tif... | [
{
"id": "fix_go_61_1",
"commit": "9b6815f",
"file_path": "./controller/appcontroller.go",
"start_line": 1771,
"end_line": 1792,
"snippet": "func (ctrl *ApplicationController) canProcessApp(obj interface{}) bool {\n\tapp, ok := obj.(*appv1.Application)\n\tif !ok {\n\t\treturn false\n\t}\n\n\t... | ghcr.io/patcheval-cve/patcheval-cve:cve-2023-22736 |
CVE-2022-31506 | The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | {
"CWE-73": {
"name": "External Control of File Name or Path",
"description": "The product allows user input to control or influence paths or file names that are used in filesystem operations."
},
"CWE-22": {
"name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
... | https://github.com/cmusatyalab/opendiamond | [
"https://github.com/cmusatyalab/opendiamond/commit/398049c187ee644beabab44d6fece82251c1ea56"
] | Python | [
{
"id": "vul_py_22_1",
"commit": "d2f20ffff793f88335f2c0244679d7193295abe2",
"file_path": "opendiamond/dataretriever/diamond_store.py",
"start_line": 122,
"end_line": 123,
"snippet": "def _get_obj_absolute_path(obj_path):\n return os.path.join(DATAROOT, obj_path)",
"vul_localization":... | [
{
"id": "fix_py_22_1",
"commit": "398049c187ee644beabab44d6fece82251c1ea56",
"file_path": "opendiamond/dataretriever/diamond_store.py",
"start_line": 123,
"end_line": 124,
"snippet": "def _get_obj_absolute_path(obj_path):\n return safe_join(DATAROOT, obj_path)"
}
] | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-31506 |
CVE-2025-48374 | zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f), when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout logs for an example ... | {
"CWE-532": {
"name": "Insertion of Sensitive Information into Log File",
"description": "The product writes sensitive information to a log file."
}
} | https://github.com/project-zot/zot | [
"https://github.com/project-zot/zot/commit/8a99a3ed231fdcd8467e986182b4705342b6a15e"
] | Go | [
{
"id": "vul_go_74_1",
"commit": "af4a46b",
"file_path": "pkg/api/config/config.go",
"start_line": 327,
"end_line": 359,
"snippet": "func (c *Config) Sanitize() *Config {\n\tsanitizedConfig := &Config{}\n\n\tif err := DeepCopy(c, sanitizedConfig); err != nil {\n\t\tpanic(err)\n\t}\n\n\tif c.... | [
{
"id": "fix_go_74_1",
"commit": "8a99a3e",
"file_path": "pkg/api/config/config.go",
"start_line": 327,
"end_line": 381,
"snippet": "func (c *Config) Sanitize() *Config {\n\tsanitizedConfig := &Config{}\n\n\tif err := DeepCopy(c, sanitizedConfig); err != nil {\n\t\tpanic(err)\n\t}\n\n\t// Sa... | ghcr.io/patcheval-cve/patcheval-cve:cve-2025-48374 |
CVE-2017-16100 | dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible. | {
"CWE-94": {
"name": "Improper Control of Generation of Code ('Code Injection')",
"description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syn... | https://github.com/skoranga/node-dns-sync | [
"https://github.com/skoranga/node-dns-sync/commit/d9abaae384b198db1095735ad9c1c73d7b890a0d)))",
"https://github.com/skoranga/node-dns-sync/commit/d9abaae384b198db1095735ad9c1c73d7b890a0d"
] | JavaScript | [
{
"id": "vul_js_2_1",
"commit": "b748fe77a87749d95876028eda8e759109be4c73",
"file_path": "lib/dns-sync.js",
"start_line": 14,
"end_line": 30,
"snippet": " resolve: function resolve(hostname) {\n var output,\n nodeBinary = process.execPath,\n scriptPath = path.... | [
{
"id": "fix_js_2_1",
"commit": "d9abaae384b198db1095735ad9c1c73d7b890a0d",
"file_path": "lib/dns-sync.js",
"start_line": 20,
"end_line": 42,
"snippet": " resolve: function resolve(hostname) {\n var output,\n nodeBinary = process.execPath;\n\n if (!isValidHostName... | ghcr.io/patcheval-cve/patcheval-cve:cve-2017-16100 |
CVE-2021-21360 | Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The prob... | {
"CWE-200": {
"name": "Exposure of Sensitive Information to an Unauthorized Actor",
"description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information."
}
} | https://github.com/zopefoundation/Products.GenericSetup | [
"https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57"
] | Python | [
{
"id": "vul_py_51_1",
"commit": "835c1ac",
"file_path": "src/Products/GenericSetup/context.py",
"start_line": 482,
"end_line": 501,
"snippet": " def writeDataFile(self, filename, text, content_type, subdir=None):\n \"\"\" See IExportContext.\n \"\"\"\n if subdir is n... | [
{
"id": "fix_py_51_1",
"commit": "700319512b3615b3871a1f24e096cf66dc488c57",
"file_path": "src/Products/GenericSetup/context.py",
"start_line": 483,
"end_line": 506,
"snippet": " def writeDataFile(self, filename, text, content_type, subdir=None):\n \"\"\" See IExportContext.\n ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2021-21360 |
CVE-2018-3772 | Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands. The `whereis` module is deprecated and it is recommended to use the `which` npm module instead. | {
"CWE-94": {
"name": "Improper Control of Generation of Code ('Code Injection')",
"description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syn... | https://github.com/vvo/node-whereis | [
"https://github.com/vvo/node-whereis/commit/0f64e3780235004fb6e43bfd153ea3e0e210ee2b"
] | JavaScript | [
{
"id": "vul_js_17_1",
"commit": "b8b642b",
"file_path": "index.js",
"start_line": 3,
"end_line": 31,
"snippet": "module.exports = function whereis(name, cb) {\n cp.exec('which ' + name, function(error, stdout, stderr) {\n stdout = stdout.split('\\n')[0];\n if (error || stderr || stdo... | [
{
"id": "fix_js_17_1",
"commit": "0f64e37",
"file_path": "index.js",
"start_line": 3,
"end_line": 31,
"snippet": "module.exports = function whereis(name, cb) {\n cp.execFile('which', [name], function(error, stdout, stderr) {\n stdout = stdout.split('\\n')[0];\n if (error || stderr || ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2018-3772 |
CVE-2022-4724 | Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. | {
"CWE-284": {
"name": "Improper Access Control",
"description": "The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor."
}
} | https://github.com/ikus060/rdiffweb | [
"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929"
] | Python | [
{
"id": "vul_py_54_1",
"commit": "d1aaa96",
"file_path": "rdiffweb/core/model/__init__.py",
"start_line": 70,
"end_line": 139,
"snippet": "@event.listens_for(Base.metadata, 'after_create')\ndef db_after_create(target, connection, **kw):\n \"\"\"\n Called on database creation to update ... | [
{
"id": "fix_py_54_1",
"commit": "c4a19cf",
"file_path": "rdiffweb/core/model/__init__.py",
"start_line": 71,
"end_line": 158,
"snippet": "def db_after_create(target, connection, **kw):\n \"\"\"\n Called on database creation to update database schema.\n \"\"\"\n\n if getattr(conn... | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-4724 |
CVE-2023-25165 | Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when u... | {
"CWE-200": {
"name": "Exposure of Sensitive Information to an Unauthorized Actor",
"description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information."
}
} | https://github.com/helm/helm | [
"https://github.com/helm/helm/commit/5abcf74227bfe8e5a3dbf105fe62e7b12deb58d2"
] | Go | [
{
"id": "vul_go_49_1",
"commit": "5bf273d81ba7da1816a55983fae6a6cf4ca29af2",
"file_path": "pkg/engine/engine.go",
"start_line": 37,
"end_line": 45,
"snippet": "type Engine struct {\n\t// If strict is enabled, template rendering will fail if a template references\n\t// a value that was not pa... | [
{
"id": "fix_go_49_1",
"commit": "5abcf74227bfe8e5a3dbf105fe62e7b12deb58d2",
"file_path": "pkg/engine/engine.go",
"start_line": 37,
"end_line": 54,
"snippet": "type Engine struct {\n\t// If strict is enabled, template rendering will fail if a template references\n\t// a value that was not pa... | ghcr.io/patcheval-cve/patcheval-cve:cve-2023-25165 |
CVE-2022-23538 | github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 bac... | {
"CWE-522": {
"name": "Insufficiently Protected Credentials",
"description": "The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval."
}
} | https://github.com/sylabs/scs-library-client | [
"https://github.com/sylabs/scs-library-client/commit/68ac4cab5cda0afd8758ff5b5e2e57be6a22fcfa"
] | Go | [
{
"id": "vul_go_71_1",
"commit": "54fbe14",
"file_path": "client/pull.go",
"start_line": 106,
"end_line": 115,
"snippet": "func (c *Client) httpGetRangeRequest(ctx context.Context, url string, start, end int64) (*http.Response, error) {\n\treq, err := c.newRequestWithURL(ctx, http.MethodGet,... | [
{
"id": "fix_go_71_1",
"commit": "68ac4cab5cda0afd8758ff5b5e2e57be6a22fcfa",
"file_path": "client/pull.go",
"start_line": 106,
"end_line": 119,
"snippet": "func (c *Client) httpGetRangeRequest(ctx context.Context, url string, start, end int64) (*http.Response, error) {\n\treq, err := http.Ne... | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-23538 |
CVE-2023-28155 | The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. | {
"CWE-918": {
"name": "Server-Side Request Forgery (SSRF)",
"description": "The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination."
}
} | https://github.com/cypress-io/request | [
"https://github.com/cypress-io/request/commit/c5bcf21d40fb61feaff21a0e5a2b3934a440024f"
] | JavaScript | [
{
"id": "vul_js_32_1",
"commit": "0664780",
"file_path": "lib/redirect.js",
"start_line": 86,
"end_line": 155,
"snippet": " function processRedirect (shouldRedirect) {\n if (!shouldRedirect) return callback(null, false)\n if (typeof shouldRedirect === 'string') {\n // overridden ... | [
{
"id": "fix_js_32_1",
"commit": "c5bcf21",
"file_path": "lib/redirect.js",
"start_line": 90,
"end_line": 159,
"snippet": " function processRedirect (shouldRedirect) {\n if (!shouldRedirect) return callback(null, false)\n if (typeof shouldRedirect === 'string') {\n // overridden ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2023-28155 |
CVE-2022-28347 | A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name. | {
"CWE-89": {
"name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
"description": "The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special element... | https://github.com/django/django | [
"https://github.com/django/django/commit/00b0fc50e1738c7174c495464a5ef069408a4402",
"https://github.com/django/django/commit/29a6c98b4c13af82064f993f0acc6e8fafa4d3f5",
"https://github.com/django/django/commit/6723a26e59b0b5429a0c5873941e01a2e1bdbb81",
"https://github.com/django/django/commit/9e19accb6e0a00ba7... | Python | [
{
"id": "vul_py_7_1",
"commit": "8008288",
"file_path": "django/db/backends/postgresql/operations.py",
"start_line": 290,
"end_line": 304,
"snippet": " def explain_query_prefix(self, format=None, **options):\n prefix = super().explain_query_prefix(format)\n extra = {}\n ... | [
{
"id": "fix_py_7_1",
"commit": "00b0fc5",
"file_path": "django/db/backends/postgresql/operations.py",
"start_line": 302,
"end_line": 319,
"snippet": " def explain_query_prefix(self, format=None, **options):\n extra = {}\n # Normalize options.\n if options:\n ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-28347 |
CVE-2017-16042 | Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution. | {
"CWE-94": {
"name": "Improper Control of Generation of Code ('Code Injection')",
"description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syn... | https://github.com/tj/node-growl | [
"https://github.com/tj/node-growl/commit/d71177d5331c9de4658aca62e0ac921f178b0669"
] | JavaScript | [
{
"id": "vul_js_44_2",
"commit": "dc8aae0",
"file_path": "lib/growl.js",
"start_line": 164,
"end_line": 290,
"snippet": "function growl(msg, options, fn) {\n var image\n , args\n , options = options || {}\n , fn = fn || function(){};\n\n if (options.exec) {\n cmd = {\n t... | [
{
"id": "fix_js_44_2",
"commit": "d71177d5331c9de4658aca62e0ac921f178b0669",
"file_path": "lib/growl.js",
"start_line": 163,
"end_line": 289,
"snippet": "function growl(msg, options, fn) {\n var image\n , args\n , options = options || {}\n , fn = fn || function(){};\n\n if (option... | ghcr.io/patcheval-cve/patcheval-cve:cve-2017-16042 |
CVE-2023-33967 | EaseProbe's MySQL and PostgreSQL data-checking probes build SQL statements from configured data keys whose components identify the database, table, selected field, lookup key, and expected value. The identifier components of those data keys are attacker- or operator-controlled configuration input, but they are concaten... | {
"CWE-89": {
"name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
"description": "The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special element... | https://github.com/megaease/easeprobe | [
"https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1"
] | Go | [
{
"id": "vul_go_26_2",
"commit": "0e148b8",
"file_path": "probe/client/mysql/mysql.go",
"start_line": 156,
"end_line": 176,
"snippet": "func (r *MySQL) getSQL(str string) (string, error) {\n\tif len(strings.TrimSpace(str)) == 0 {\n\t\treturn \"\", fmt.Errorf(\"Empty SQL data\")\n\t}\n\tfield... | [
{
"id": "fix_go_26_1",
"commit": "caaf586",
"file_path": "probe/client/mysql/mysql.go",
"start_line": 171,
"end_line": 191,
"snippet": "func (r *MySQL) getSQL(str string) (string, error) {\n\tif len(strings.TrimSpace(str)) == 0 {\n\t\treturn \"\", fmt.Errorf(\"Empty SQL data\")\n\t}\n\tfield... | ghcr.io/patcheval-cve/patcheval-cve:cve-2023-33967 |
CVE-2024-21542 | Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function. | {
"CWE-73": {
"name": "External Control of File Name or Path",
"description": "The product allows user input to control or influence paths or file names that are used in filesystem operations."
},
"CWE-22": {
"name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
... | https://github.com/spotify/luigi | [
"https://github.com/spotify/luigi/commit/b5d1b965ead7d9f777a3216369b5baf23ec08999"
] | Python | [
{
"id": "vul_py_36_1",
"commit": "c9a0d20",
"file_path": "luigi/contrib/lsf_runner.py",
"start_line": 47,
"end_line": 62,
"snippet": "def extract_packages_archive(work_dir):\n package_file = os.path.join(work_dir, \"packages.tar\")\n if not os.path.exists(package_file):\n return... | [
{
"id": "fix_py_36_1",
"commit": "b5d1b96",
"file_path": "luigi/contrib/lsf_runner.py",
"start_line": 31,
"end_line": 31,
"snippet": "from luigi.safe_extractor import SafeExtractor"
},
{
"id": "fix_py_36_2",
"commit": "b5d1b96",
"file_path": "luigi/contrib/lsf_runner.py",
... | ghcr.io/patcheval-cve/patcheval-cve:cve-2024-21542 |
CVE-2022-1883 | SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0. | {
"CWE-89": {
"name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
"description": "The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special element... | https://github.com/camptocamp/terraboard | [
"https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc"
] | Go | [
{
"id": "vul_go_31_1",
"commit": "608d9d5",
"file_path": "db/db.go",
"start_line": 323,
"end_line": 411,
"snippet": "func (db *Database) SearchAttribute(query url.Values) (results []types.SearchResult, page int, total int) {\n\tlog.WithFields(log.Fields{\n\t\t\"query\": query,\n\t}).Info(\"S... | [
{
"id": "fix_go_31_1",
"commit": "2a5dbaa",
"file_path": "db/db.go",
"start_line": 323,
"end_line": 413,
"snippet": "func (db *Database) SearchAttribute(query url.Values) (results []types.SearchResult, page int, total int) {\n\tlog.WithFields(log.Fields{\n\t\t\"query\": query,\n\t}).Info(\"S... | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-1883 |
CVE-2024-27302 | go-zero is a web and rpc framework. Go-zero allows user to specify a CORS Filter with a configurable allows param - which is an array of domains allowed in CORS policy. However, the `isOriginAllowed` uses `strings.HasSuffix` to check the origin, which leads to bypass via a malicious domain. This vulnerability is capabl... | {
"CWE-862": {
"name": "Missing Authorization",
"description": "The product does not perform an authorization check when an actor attempts to access a resource or perform an action."
},
"CWE-639": {
"name": "Authorization Bypass Through User-Controlled Key",
"description": "The system's authorizat... | https://github.com/zeromicro/go-zero | [
"https://github.com/zeromicro/go-zero/commit/d9d79e930dff6218a873f4f02115df61c38b15db"
] | Go | [
{
"id": "vul_go_11_1",
"commit": "d953675",
"file_path": "rest/internal/cors/handlers.go",
"start_line": 79,
"end_line": 91,
"snippet": "func isOriginAllowed(allows []string, origin string) bool {\n\tfor _, o := range allows {\n\t\tif o == allOrigins {\n\t\t\treturn true\n\t\t}\n\n\t\tif str... | [
{
"id": "fix_go_11_1",
"commit": "d9d79e9",
"file_path": "rest/internal/cors/handlers.go",
"start_line": 79,
"end_line": 97,
"snippet": "func isOriginAllowed(allows []string, origin string) bool {\n\torigin = strings.ToLower(origin)\n\tfor _, allow := range allows {\n\t\tif allow == allOrigi... | ghcr.io/patcheval-cve/patcheval-cve:cve-2024-27302 |
CVE-2022-41672 | In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API. | {
"CWE-285": {
"name": "Improper Authorization",
"description": "The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action."
},
"CWE-250": {
"name": "Execution with Unnecessary Privileges",
"description": "The produ... | https://github.com/apache/airflow | [
"https://github.com/apache/airflow/commit/12bfb571a895a28a58d3189b0fc10cfc1b89e24c"
] | Python | [
{
"id": "vul_py_27_1",
"commit": "d81b297",
"file_path": "airflow/www/app.py",
"start_line": 72,
"end_line": 155,
"snippet": "def create_app(config=None, testing=False):\n \"\"\"Create a new instance of Airflow WWW app\"\"\"\n flask_app = Flask(__name__)\n flask_app.secret_key = con... | [
{
"id": "fix_py_27_1",
"commit": "12bfb57",
"file_path": "airflow/www/app.py",
"start_line": 76,
"end_line": 160,
"snippet": "def create_app(config=None, testing=False):\n \"\"\"Create a new instance of Airflow WWW app\"\"\"\n flask_app = Flask(__name__)\n flask_app.secret_key = con... | ghcr.io/patcheval-cve/patcheval-cve:cve-2022-41672 |
CVE-2021-23727 | Celery's result backend exception deserialization trusts exception metadata read from the backend. In BaseBackend.exception_to_python, attacker-controlled backend fields such as exc_module, exc_type, and exc_message can cause Celery to resolve and instantiate an arbitrary Python object instead of a real exception class... | {
"CWE-94": {
"name": "Improper Control of Generation of Code ('Code Injection')",
"description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syn... | https://github.com/celery/celery | [
"https://github.com/celery/celery/commit/1f7ad7e6df1e02039b6ab9eec617d283598cad6b"
] | Python | [
{
"id": "vul_py_41_1",
"commit": "2d8dbc2",
"file_path": "celery/backends/base.py",
"start_line": 339,
"end_line": 369,
"snippet": " def exception_to_python(self, exc):\n \"\"\"Convert serialized exception to Python exception.\"\"\"\n if exc:\n if not isinstance(e... | [
{
"id": "fix_py_41_1",
"commit": "1f7ad7e",
"file_path": "celery/backends/base.py",
"start_line": 340,
"end_line": 409,
"snippet": " def exception_to_python(self, exc):\n \"\"\"Convert serialized exception to Python exception.\"\"\"\n if not exc:\n return None\n ... | ghcr.io/patcheval-cve/patcheval-cve:cve-2021-23727 |
CVE-2018-14574 | django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect. | {
"CWE-601": {
"name": "URL Redirection to Untrusted Site ('Open Redirect')",
"description": "The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect."
}
} | https://github.com/django/django | [
"https://github.com/django/django/commit/d6eaee092709aad477a9894598496c6deec532ff",
"https://github.com/django/django/commit/c4e5ff7fdb5fce447675e90291fd33fddd052b3c",
"https://github.com/django/django/commit/6fffc3c6d420e44f4029d5643f38d00a39b08525"
] | Python | [
{
"id": "vul_py_10_1",
"commit": "af344691114e4a68334c30543bfb838996328212",
"file_path": "django/middleware/common.py",
"start_line": 83,
"end_line": 102,
"snippet": " def get_full_path_with_slash(self, request):\n \"\"\"\n Return the full path of the request with a trailin... | [
{
"id": "fix_py_10_1",
"commit": "6fffc3c6d420e44f4029d5643f38d00a39b08525",
"file_path": "django/middleware/common.py",
"start_line": 84,
"end_line": 105,
"snippet": " def get_full_path_with_slash(self, request):\n \"\"\"\n Return the full path of the request with a trailin... | ghcr.io/patcheval-cve/patcheval-cve:cve-2018-14574 |
CVE-2021-21291 | OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group. In OAuth2 Proxy before version 7.0.0, for users that use the whitelist domain feature, a domain that ended in a similar way to the... | {
"CWE-601": {
"name": "URL Redirection to Untrusted Site ('Open Redirect')",
"description": "The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect."
}
} | https://github.com/oauth2-proxy/oauth2-proxy | [
"https://github.com/oauth2-proxy/oauth2-proxy/commit/780ae4f3c99b579cb2ea9845121caebb6192f725"
] | Go | [
{
"id": "vul_go_12_1",
"commit": "48b1658",
"file_path": "oauthproxy.go",
"start_line": 425,
"end_line": 466,
"snippet": "func (p *OAuthProxy) IsValidRedirect(redirect string) bool {\n\tswitch {\n\tcase redirect == \"\":\n\t\t// The user didn't specify a redirect, should fallback to `/`\n\t\... | [
{
"id": "fix_go_12_1",
"commit": "780ae4f",
"file_path": "oauthproxy.go",
"start_line": 425,
"end_line": 468,
"snippet": "func (p *OAuthProxy) IsValidRedirect(redirect string) bool {\n\tswitch {\n\tcase redirect == \"\":\n\t\t// The user didn't specify a redirect, should fallback to `/`\n\t\... | ghcr.io/patcheval-cve/patcheval-cve:cve-2021-21291 |
End of preview. Expand in Data Studio
👋 Overview
PatchEval-Verified is a benchmark for evaluating LLMs and coding agents on automated repair of real-world vulnerabilities. It contains 230 CVE cases with Docker-based evaluation environments, covering vulnerabilities reported between 2015 and 2025 across Go, JavaScript, and Python.
PatchEval-Verified updates the evaluation environments from the original PatchEval release. In the original benchmark, some PoC tests were adapted from project regression tests and were tied too closely to particular patch implementations. The revised tests evaluate whether a vulnerability is fixed rather than requiring a specific fix, improving robustness and reducing false negatives.
📜 Data Instance Structure
Each entry is a JSON object with the following fields:
cve_id: (str)
The CVE identifier, for example, CVE-2024-42005.
cve_description: (str)
The vulnerability description from NVD.
cwe_info: (dict)
Information about the associated Common Weakness Enumeration (CWE),
including its name and description.
repo: (str)
The URL of the affected source-code repository.
patch_url: (list[str])
URLs of the reference vulnerability fixes.
programing_language: (str)
The primary programming language of the vulnerable code. The field name
is intentionally preserved for compatibility with the released dataset.
vul_func: (list[dict])
Vulnerable code snippets and their source locations.
fix_func: (list[dict])
Reference fixed code snippets and their source locations.
image_url: (str)
The Docker image used to run patch validation for this CVE case.
Note:
patch_urlandfix_funccontain reference-fix information. They should not be exposed to a model or agent when evaluating end-to-end vulnerability repair unless the experimental setting explicitly allows such information.
🐳 Docker Images and Evaluation
The 230 Docker images are published under:
ghcr.io/patcheval-cve/patcheval-cve:cve-<year>-<id>
The exact image for each case is provided in its image_url field. The PatchEval repository provides scripts for downloading the images, generating patches with CLI coding agents, and evaluating JSON/JSONL patch submissions.
A patch submission uses the following format:
{
"cve": "CVE-2021-23376",
"fix_patch": "diff --git ..."
}
A repair is considered successful only when the validation entrypoint in the corresponding Docker environment exits successfully.
📖 Citation
If you find PatchEval useful for your research and applications, feel free to give us a star ⭐ or cite us using:
@misc{wei2025patcheval,
title={PATCHEVAL: A New Benchmark for Evaluating LLMs on Patching Real-World Vulnerabilities},
author={Zichao Wei and Jun Zeng and Ming Wen and Zeliang Yu and Kai Cheng and Yiding Zhu and Jingyi Guo and Shiqi Zhou and Le Yin and Xiaodong Su and Zhechao Ma},
year={2025},
eprint={2511.11019},
archivePrefix={arXiv},
primaryClass={cs.CR},
url={https://arxiv.org/abs/2511.11019},
}
✍️ License
This project is licensed under the Apache License 2.0.
- Downloads last month
- 191