VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?
VulnBump tests AI agents on 307 real dependency upgrades. A fix counts only if the vulnerability is gone and the build and tests stay green.
相关文章
- A kernel fix leaked to a public mailing list: my triage runbook2026-11-03
- Kubernetes 升级前：核对 cgroup 模式与兼容性2026-11-03
- New update 0.57.1 for Hyprland released, fixes black screens on NVIDIA cards2026-11-03
- Next.js Cache Not Working? A 10-Step Checklist for Next.js 15 and 162026-11-03
- Building a Localized Content Research Tool with SearchApi and Python2026-11-03
- Checking your customers' EU VAT and UK EORI numbers from code, without treating …2026-11-03