Taxonomy-Aligned Vulnerability Fine-Tuning for Zero-Shot Code Repair Generalization

Abstract

Abstract: This report synthesises findings from 14 peer-reviewed papers addressing the following research question: To what extent does taxonomy-aligned vulnerability fine-tuning improve zero-shot generalization on out-of-distribution code repair benchmarks like QuixBugs versus general code corpora. As Large Language Models (LLMs) become increasingly integrated into secure software development workflows, a critical question remains unanswered: can these models not only detect insecure code but also reliably classify vulnerabilities according to standardized taxonomies? In. 11 claims were extracted from source literature; 5 were independently verified against retrieved documents. An automated multi-reviewer quality assessment produced a score of 6.4/10. This report is a machine-generated literature synthesis and does not constitute original research.

Research Question

To what extent does taxonomy-aligned vulnerability fine-tuning improve zero-shot generalization on out-of-distribution code repair benchmarks like QuixBugs versus general code corpora?

Verification Level

Descriptive public verification status only; aggregate claim counts are public, but individual claim records are not exposed here.

Quality Tier

Descriptive public triage only; this tier does not alter current publication or DOI behavior.

Quality Dimensions

Automated triage signals derived from public fields; not human peer review or independent validation.

Correction Record

Public corrections are additive records. Current status does not claim the synthesis is error-free.

Provenance