Paper Citation Record · LEDGER

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code

As of 5 August 2026, this Paper Citation Record lists 27 of 27 outbound references and 1 inbound Pith citation observation for arXiv:2604.13764.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2604.13764 v1

Coverage vector

measured 27 of 27 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-10T12:39:37.047074Z

measured 28 of 28 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-07-30T13:18:42.944595Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

27 of 27 outbound references displayed

verified exact7
verified fuzzy13
unresolved4
parse uncertain0
malformed identifier1
metadata mismatch2

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 963e0aa1-e4b0-45e5-99c5-e003630e336a · outbound

This paper cites Wobbrock, and Katharina Reinecke.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Wobbrock, and Katharina Reinecke

Reference 1

Resolution: malformed identifier; doi_truncated, observed 2026-05-10T12:40:22.798085Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 76d2a341-49c6-4d1c-8496-64c5b2ab8ece · outbound

This paper cites an unresolved cited work.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Unresolved cited work

Reference 2

Resolution: verified exact; doi, observed 2026-05-10T12:40:22.800690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 805b829d-f5a9-4946-a14b-eb024e0f5706 · outbound

This paper cites WebenchmarkedthebestSASTtools.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code WebenchmarkedthebestSASTtools

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.380081Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation beeacd42-0c04-4607-8a55-b491ca65dd02 · outbound

This paper cites Black, Vadim Okun, Terry Cohen, and Athos Ribeiro.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Black, Vadim Okun, Terry Cohen, and Athos Ribeiro

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.376850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 0483ab8c-460f-47ce-8a4d-1d8a15225b91 · outbound

This paper cites an unresolved cited work.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-05-19T05:43:00.369062Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 3fcdcbca-af2f-496e-b08d-1f447e9b9e99 · outbound

This paper cites Vulnerability Detection with Code Language Models: How Far Are We?.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Vulnerability Detection with Code Language Models: How Far Are We?

Reference 6

Resolution: verified exact; arxiv_id, observed 2026-05-10T12:40:23.955951Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 7f724420-7ce3-4852-a7d4-a496a530450b · outbound

This paper cites 2025 SAST accuracy report.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code 2025 SAST accuracy report

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.405240Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 491c6691-8e25-4282-892c-9ce5ffca9dba · outbound

This paper cites CASTLE: Benchmarking Dataset for Static Code Analyzers and LLMs towards CWE Detection.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code CASTLE: Benchmarking Dataset for Static Code Analyzers and LLMs towards CWE Detection

Reference 8

Resolution: metadata mismatch; arxiv_id, observed 2026-05-10T12:40:23.959461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 5730655b-4d56-450f-b816-52ded27eefa7 · outbound

This paper cites SastBench: A benchmark for testing agentic SAST triage.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code SastBench: A benchmark for testing agentic SAST triage

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-10T12:40:23.964384Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 39c9f0bb-213c-4c9a-92a1-639b0c672e0d · outbound

This paper cites Rival Labs.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Rival Labs

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.419151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 5f06616b-e7d8-4d15-8d53-3fe96be9b7db · outbound

This paper cites Toolbenchmark: BoostingAST accuracy through pentesting.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Toolbenchmark: BoostingAST accuracy through pentesting

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.383893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation d4396de0-0729-4fe3-b935-657deb46d491 · outbound

This paper cites an unresolved cited work.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-05-19T05:43:00.398079Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 878023d7-290d-4f3d-be55-1ba5b9d4d880 · outbound

This paper cites Exorcising the SAST demons: Contextual application security test- ing (CAST).

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Exorcising the SAST demons: Contextual application security test- ing (CAST)

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.415850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation e7e991de-3654-4480-9563-fd7709f6da4f · outbound

This paper cites Seclab taskflow agent: Multi-stage threat-model-driven security au- ditor.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Seclab taskflow agent: Multi-stage threat-model-driven security au- ditor

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.409063Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 39e3e8ae-0af9-4878-a0f8-df13e4e91bc0 · outbound

This paper cites SWE-bench: Can Language Models Resolve Real-World GitHub Issues?.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code SWE-bench: Can Language Models Resolve Real-World GitHub Issues?

Reference 15

Resolution: metadata mismatch; arxiv_id, observed 2026-05-10T14:02:01.580101Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 4f7d1a0d-429d-40ac-aa62-e3050753a858 · outbound

This paper cites CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics

Reference 16

Resolution: verified exact; arxiv_id, observed 2026-05-10T12:40:23.951860Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation f4eea9d7-3937-464b-aee5-e2bdf96c2c80 · outbound

This paper cites Introducing SWE-bench verified.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Introducing SWE-bench verified

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.401733Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation a2f1e478-e07a-4873-b2b9-1663e4bc13c5 · outbound

This paper cites OWASP benchmark project.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code OWASP benchmark project

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.387747Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 18f80c91-564e-468d-bc12-afcefaef122a · outbound

This paper cites Semgrep: Lightweight static analysis for many languages.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Semgrep: Lightweight static analysis for many languages

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.394055Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation d85f6397-d314-42ea-a5d5-ced7e9bcae73 · outbound

This paper cites Snyk code: Developer-first SAST.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Snyk code: Developer-first SAST

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.358477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 7bec4694-d08e-452e-a440-b5454a5dde4e · outbound

This paper cites SonarQube: Code quality and security.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code SonarQube: Code quality and security

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.361385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation e368edb4-fbc8-4ebd-a26a-392883612e3e · outbound

This paper cites ReposVul: A Repository-Level High-Quality Vulnerability Dataset.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code ReposVul: A Repository-Level High-Quality Vulnerability Dataset

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-05-10T12:40:23.975284Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation a3b8ed38-3d39-4fa1-b1f4-4eb919c0b11b · outbound

This paper cites Benchmarking LLMs and LLM-based Agents in Practical Vulnerability Detection for Code Repositories.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Benchmarking LLMs and LLM-based Agents in Practical Vulnerability Detection for Code Repositories

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-05-10T12:40:23.971767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation a69133b1-75e1-4361-8bc5-475437b801dd · outbound

This paper cites an unresolved cited work.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Unresolved cited work

Reference 24

Resolution: unresolved; raw_fallback, observed 2026-05-19T05:43:00.365330Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 3e25d0ab-2657-47ab-8e57-bad31e1a0151 · outbound

This paper cites Towards actual SAST bench- marks.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Towards actual SAST bench- marks

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-05-19T05:43:00.372877Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 29017f42-d4c8-4293-8c6b-9861a70b95d4 · outbound

This paper cites CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities

Reference 26

Resolution: verified exact; arxiv_id, observed 2026-05-10T12:40:23.968189Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 975a5d8c-56e2-4284-82c1-e41863a32275 · outbound

This paper cites an unresolved cited work.

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code Unresolved cited work

Reference 27

Resolution: unresolved; raw_fallback, observed 2026-05-19T05:43:00.412279Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Pith citing papers

Observation 7455afa5-f7a2-4361-9416-2a3f76433378 · inbound

HoF-Bench: Rediscovering Real AI-Discovered CVEs Without Frontier Models cites this paper.

HoF-Bench: Rediscovering Real AI-Discovered CVEs Without Frontier Models RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code

Reference 12

Resolution: unresolved; no resolver link, observed 2026-07-30T13:18:42.944595Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.