Software-security records pairing vulnerability analysis with vulnerable code, patched code, and unified diffs. Coverage includes Python application security and TypeScript dependency and supply-chain issues.
Available Now · Sample Available
CVE-Class Vulnerability Fix Dataset
Software vulnerability analysis paired with code changes and security metadata.
Volume
0
Volume
Scalable Volume
Coverage
Application Security, Software Supply Chain, Python, TypeScript, Cybersecurity, Coding
Targets
Modality & Delivery
TextCode→TextCode
Formats
JSON
What You Receive
Coverage
Root cause, affected components, attack vectors, exploit paths, impact, and mitigation, with CVE, CWE, and MITRE ATT&CK references where available.
Package Structure
Differentiators
- Connects vulnerability analysis to the corresponding code changes.
Record Schema
affectedComponentstringThe vulnerable function, module, package, or call site.
attackVectorstringHow an attacker can reach or influence the vulnerable behavior.
codeobjectVulnerable code, patched code, and a unified patch diff.
exploitPatharrayA multi-step chain from attacker action to successful exploitation.
impactstringThe resulting confidentiality, integrity, or availability consequence.
mitigationstringThe secure remediation approach.
referencesobjectCVE, CWE, ATT&CK, commit, and advisory metadata when available.
rootCausestringThe implementation decision or condition creating the weakness.
vulnerabilitystringA concise description of the exploitable defect.
weaknessstringThe vulnerability class and associated CWE.
Results
Methodology & Quality
Methodology
SME involvement
Stressors
Application-security vulnerabilities and dependency or software-supply-chain weaknesses.
Design criteria
- Keep vulnerability reasoning, remediation, code, and CVE/CWE/ATT&CK metadata together in one record.
Build assumptions
Quality approach
Known limitations
Customization & Scalability
Additional volume in production.
Get Started
Request a Sample
Share your target domains and the OTS team will follow up with sample data and next steps.