TraceVIC: Causal Reasoning over Code Evolution for Identifying Vulnerability-Inducing Commits.

arXiv:2609.26711v2 Announce Type: replace-cross Abstract: Software vulnerabilities are often discovered long after they are introduced, making it difficult to identify the vulnerability-inducing commit (VIC) responsible for introducing the underlying vulnerabl