Model Rodeo Scorecard

Generated: 2026-03-27 04:43 UTC

Overall Ranking (by average F1 across conditions)

#ModelWeightTypeAvg F1Best Condition
1claude-haiku-4-5cloudgeneral0.978C (1.000)
2granite3.3:8b8Bgeneral0.929D (0.930)
3mistral-nemo:latest12Bgeneral0.870D (0.882)

Weight Class Winners

Weight ClassModelAvg F1
8Bgranite3.3:8b0.929
12Bmistral-nemo:latest0.870
cloudclaude-haiku-4-50.978

Condition Comparison

ModelCold (code only)Hinted (persona)CPG-enrichedCPG + findingsAugment + tiebreakerReview + tiebreaker
claude-haiku-4-5--F1=1.00 P=1.00 R=1.00 FPF=1.00F1=0.96 P=0.92 R=1.00 FPF=0.92--
granite3.3:8b--F1=0.93 P=0.86 R=1.00 FPF=0.86F1=0.93 P=0.87 R=1.00 FPF=0.86--
mistral-nemo:latest--F1=0.86 P=0.81 R=0.91 FPF=0.81F1=0.88 P=0.86 R=0.91 FPF=0.86--

Heatmap: Models x Conditions x Metrics

ModelA:f1A:precA:recaA:fp_fA:accuB:f1B:precB:recaB:fp_fB:accuC:f1C:precC:recaC:fp_fC:accuD:f1D:precD:recaD:fp_fD:accuE:f1E:precE:recaE:fp_fE:accuF:f1F:precF:recaF:fp_fF:accu
claude-haiku-4-5not runnot run1.001.001.001.001.000.960.921.000.920.96not runnot run
granite3.3:8bnot runnot run0.930.861.000.860.910.930.871.000.860.93not runnot run
mistral-nemo:latestnot runnot run0.860.810.910.810.860.880.860.910.860.89not runnot run

Per-Sample Detail

context_dependent/cd_async_race.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDY--OK
granite4:350mEY--OK
granite4:350mFN--OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY--OK
codellama:latestDYY-OK
context_dependent/cd_cache_bypass.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_class_method_chain.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBN--ERR
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAN--ERR
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--ERR
granite4:350mBY-YOK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDN--OK
granite4:1bEY-YOK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_conditional_vuln.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDNY-OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCN--ERR
granite4:1bDYY-OK
granite4:1bEN--ERR
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_decorator_validates.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--ERR
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
starcoder2:3bAN--OK
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_django_orm_safe.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAY-YOK
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_encode_wrong_context.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBY--OK
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_flask_escape_then_render.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAY-YOK
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DN--OK
granite4:350mAN--OK
granite4:350mBY-YOK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_framework_auto_escape.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCN--OK
codellama:latestDY-YOK
context_dependent/cd_global_config_flag.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAY--OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAN--ERR
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_import_sanitizer.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBN--ERR
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_middleware_validates.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBN--ERR
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBN--OK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAN--ERR
llama3:8bBN--OK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBN--OK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_multi_function_flow.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBY-YOK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDN--OK
granite4:1bEN--OK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_nested_function_safe.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAN--ERR
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_partial_sanitize.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAYY-OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBN--ERR
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_sanitized_before_sql.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAY--OK
llama3:8bBY--OK
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCY--OK
granite3.3:8bDY--OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDY--OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DY--OK
granite4:350mAN--ERR
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDY--OK
granite4:1bEY--OK
granite4:1bFY--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY--OK
codellama:latestDY--OK
context_dependent/cd_tainted_after_check.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBN--ERR
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBN--ERR
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_try_except_swallow.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAY--OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDN--OK
granite4:1bEYY-OK
granite4:1bFYY-OK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCYY-OK
codellama:latestDYY-OK
context_dependent/cd_user_object_method.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAN--ERR
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDY-YOK
context_dependent/cd_whitelist_check.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBY-YOK
llama3:8bAY-YOK
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDN--OK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDN--OK
granite4:1bEN--OK
granite4:1bFY-YOK
starcoder2:3bAN--ERR
starcoder2:3bBN--ERR
codellama:latestCY-YOK
codellama:latestDN--OK
false_positives/fp_base64_decode.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_compile_pattern.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_eval_constant.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_eval_math.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCN--OK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_exec_type_factory.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCN--OK
granite3.3:8bDN--OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_format_string_log.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCN--OK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_hardcoded_test_key.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_hmac_compare.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCN--OK
granite3.3:8bDN--OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDN--OK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDN--OK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_html_escape.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_md5_cache_key.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DN--OK
granite4:350mAN--ERR
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_md5_checksum.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_os_path_join_safe.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_os_system_literal.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_parameterized_query.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAY-YOK
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAY-YOK
granite4:1bBY-YOK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_pickle_trusted_cache.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--OK
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCN--OK
granite3.3:8bDN--OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDN--OK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDN--OK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_random_seed.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBY-YOK
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCY-YOK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_requests_internal.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DN--OK
granite4:350mAN--OK
granite4:350mBN--ERR
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_serialize_json.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCN--OK
granite3.3:8bDN--OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDN--OK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDN--OK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_sha1_fingerprint.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAY-YOK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_sha1_git_hash.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--ERR
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEY-YOK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_sqlalchemy_orm.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCN--OK
granite3.3:8bDY-YOK
mistral-nemo:latestCN--OK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_subprocess_fixed_cmd.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_subprocess_list_args.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBY-YOK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDN--OK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCN--OK
false_positives/fp_tempfile_named.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAN--OK
granite3.3:8bBN--OK
qwen2.5-coder:7bAN--OK
qwen2.5-coder:7bBN--OK
codellama:latestAN--OK
codellama:latestBN--OK
llama3:8bAN--OK
llama3:8bBN--ERR
mistral-nemo:latestAN--OK
mistral-nemo:latestBN--OK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAN--OK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDN--OK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDN--OK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFN--OK
granite4:1bCN--OK
granite4:1bDN--OK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
false_positives/fp_template_autoescaped.py (SAFE)
ModelCondClassCWEFPFParse
granite3.3:8bAY-YOK
granite3.3:8bBY-YOK
qwen2.5-coder:7bAY-YOK
qwen2.5-coder:7bBY-YOK
codellama:latestAY-YOK
codellama:latestBN--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY-YOK
mistral-nemo:latestBY-YOK
granite4:1bAN--OK
granite4:1bBN--OK
deepseek-coder-v2:16bAY-YOK
deepseek-coder-v2:16bBN--OK
granite3.3:8bCY-YOK
granite3.3:8bDY-YOK
mistral-nemo:latestCY-YOK
mistral-nemo:latestDY-YOK
claude-haiku-4-5CY-YOK
claude-haiku-4-5DY-YOK
granite4:350mAN--OK
granite4:350mBN--OK
granite4:350mCN--OK
granite4:350mDY-YOK
granite4:350mEN--OK
granite4:350mFY-YOK
granite4:1bCN--OK
granite4:1bDY-YOK
granite4:1bEN--OK
granite4:1bFY-YOK
codellama:latestCY-YOK
true_positives/tp_command_injection_arg.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBN--ERR
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_deserialization_shelve.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCY--OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDNY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDY--OK
granite4:350mEYY-OK
granite4:350mFN--OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_eval_user_input.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCY--OK
granite3.3:8bDY--OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDY--OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DY--OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFY--OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_exec_flask_script.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCN--ERR
granite3.3:8bDYY-OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDN--OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DY--OK
granite4:350mAY--OK
granite4:350mBN--ERR
granite4:350mCY--OK
granite4:350mDY--OK
granite4:350mEY--OK
granite4:350mFN--OK
granite4:1bCY--OK
granite4:1bDN--ERR
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_exec_user_code.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBY--OK
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCY--OK
granite3.3:8bDYY-OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDY--OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DY--OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFY--OK
granite4:1bCY--OK
granite4:1bDNY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_format_string_vuln.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBN--ERR
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCY--OK
granite3.3:8bDY--OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDY--OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DY--OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDY--OK
granite4:350mEY--OK
granite4:350mFN--OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_hardcoded_api_key.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCY--OK
granite3.3:8bDYY-OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_hardcoded_password.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCY--OK
granite3.3:8bDYY-OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_jwt_none_alg.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBY--OK
llama3:8bAY--OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCY--OK
granite3.3:8bDY--OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDN--OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DY--OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFN--OK
granite4:1bCY--OK
granite4:1bDN--OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_md5_password.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCY--OK
granite3.3:8bDY--OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDY--OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DY--OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFN--OK
granite4:1bCY--OK
granite4:1bDN--OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_open_redirect.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAYY-OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_os_system_input.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_path_traversal.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAYY-OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCY--OK
granite4:1bDN--ERR
granite4:1bEY--OK
granite4:1bFN--ERR
codellama:latestCY--OK
true_positives/tp_pickle_network.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_pickle_request.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_random_otp.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAYY-OK
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCN--OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDN--OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_sql_concat.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBN--ERR
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDY--OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_sql_format.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBN--ERR
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_sql_fstring.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAY--OK
granite4:1bBY--OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBN--ERR
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_ssrf_fetch.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAY--OK
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDY--OK
granite4:350mEYY-OK
granite4:350mFN--OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_subprocess_shell.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAYY-OK
qwen2.5-coder:7bBYY-OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCYY-OK
granite4:350mDN--OK
granite4:350mEYY-OK
granite4:350mFYY-OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_weak_random_token.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAY--OK
granite3.3:8bBY--OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBY--OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAY--OK
deepseek-coder-v2:16bBY--OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCY--OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CY--OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDY--OK
granite4:350mEY--OK
granite4:350mFN--OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCY--OK
true_positives/tp_xss_mark_safe.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAYY-OK
codellama:latestBYY-OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAYY-OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDNY-OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_xss_no_escape.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAYY-OK
codellama:latestBY--OK
llama3:8bAYY-OK
llama3:8bBYY-OK
mistral-nemo:latestAYY-OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCY--OK
granite4:350mDNY-OK
granite4:350mEY--OK
granite4:350mFYY-OK
granite4:1bCY--OK
granite4:1bDYY-OK
granite4:1bEY--OK
granite4:1bFN--OK
codellama:latestCYY-OK
true_positives/tp_yaml_unsafe.py (VULNERABLE)
ModelCondClassCWEFPFParse
granite3.3:8bAYY-OK
granite3.3:8bBYY-OK
qwen2.5-coder:7bAY--OK
qwen2.5-coder:7bBY--OK
codellama:latestAY--OK
codellama:latestBY--OK
llama3:8bAN--ERR
llama3:8bBN--ERR
mistral-nemo:latestAY--OK
mistral-nemo:latestBYY-OK
granite4:1bAYY-OK
granite4:1bBYY-OK
deepseek-coder-v2:16bAYY-OK
deepseek-coder-v2:16bBYY-OK
granite3.3:8bCYY-OK
granite3.3:8bDYY-OK
mistral-nemo:latestCYY-OK
mistral-nemo:latestDYY-OK
claude-haiku-4-5CYY-OK
claude-haiku-4-5DYY-OK
granite4:350mAY--OK
granite4:350mBY--OK
granite4:350mCN--ERR
granite4:350mDY--OK
granite4:350mEYY-OK
granite4:350mFN--OK
granite4:1bCYY-OK
granite4:1bDYY-OK
granite4:1bEYY-OK
granite4:1bFN--OK
codellama:latestCYY-OK

Methodology