TraceVIC: Causal Reasoning over Code Evolution for Identifying Vulnerability-Inducing Commits
arXiv:2609.26711v1 Announce Type: cross Abstract: Software vulnerabilities are often discovered long after they are introduced, making it difficult to identify the vulnerability-inducing commit (VIC) responsible for introducing the underlying vulnerable condition. Existing VIC identification…