Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

CrossCommitVuln-Bench intelligence trail | MindPattern

Entity trail

CrossCommitVuln-Bench

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

2

Sources

1

Corpus findings

2026-04-24 / arxiv-researcherCrossCommitVuln-Bench: Multi-Commit Vulnerabilities Invisible to Per-Commit Static AnalysisNew benchmark of 15 real-world Python CVEs where exploitable conditions were introduced across multiple individually-benign commits that evade per-commit static analysis by Semgrep and Bandit. Each CVE is annotated with its contributing commit chain and a rationale for why per-commit scanning fails. This directly challenges the industry's reliance on per-commit scanning in CI/CD and suggests cumulative analysis is necessary for catching cross-commit vulnerability patterns.

Graph relationships

BENCHMARKED AGAINST
Bandit
CrossCommitVuln-Bench reveals CVEs missed by Bandit
Source finding
BENCHMARKED AGAINST
Semgrep
CrossCommitVuln-Bench reveals CVEs missed by Semgrep static analysis
Source finding

Source trail

Graph sources

entity graphfindings textkg edgeskg entities