{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T06:15:29Z","timestamp":1783059329622,"version":"3.54.6"},"reference-count":66,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,17]]},"DOI":"10.1109\/saner67736.2026.00038","type":"proceedings-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T19:41:17Z","timestamp":1783021277000},"page":"1-12","source":"Crossref","is-referenced-by-count":0,"title":["VULTERMINATOR: Bringing Back Template-Based Automated Repair for Fixing Java Vulnerabilities"],"prefix":"10.1109","author":[{"given":"Quang-Cuong","family":"Bui","sequence":"first","affiliation":[{"name":"Institute of Software Security, Hamburg University of Technology,Hamburg,Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emanuele","family":"Iannone","sequence":"additional","affiliation":[{"name":"Institute of Software Security, Hamburg University of Technology,Hamburg,Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Riccardo","family":"Scandariato","sequence":"additional","affiliation":[{"name":"Institute of Software Security, Hamburg University of Technology,Hamburg,Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3147265"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549098"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10216-4"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639222"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3632746"},{"key":"ref6","first-page":"4401","article-title":"Logs in, patches out: Automated vulnerability repair via \\{Tree-of-Thought\\}\\{LLM\\} analysis","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"Kim"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3156637"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3524610.3527895"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00022"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387501"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/icse55347.2025.00038"},{"key":"ref12","year":"2025","journal-title":"2025 stack overflow developer survey: Most popular programming, scripting, and markup languages"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330577"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00063"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00127"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/icse55347.2025.00030"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-023-10415-7"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106745"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion.2019.00043"},{"key":"ref20","author":"Iannone","year":"2024","journal-title":"Vul4j+: A dataset of vulnerabilities for automated vulnerability repair"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3528482"},{"key":"ref22","year":"2025","journal-title":"Owasp xml external entity prevention cheat sheet"},{"key":"ref23","article-title":"Replication package for our paper","year":"2025","journal-title":"Figshare"},{"key":"ref24","volume-title":"Cve-2022\u20131471","year":"2025"},{"key":"ref25","volume-title":"Cve-2022\u201331159","year":"2025"},{"key":"ref26","year":"2025","journal-title":"Cwe-378: Creation of temporary file with insecure permissions"},{"key":"ref27","year":"2025","journal-title":"Api documentation of files.createtempfile"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2018.8330203"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.499"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2025.3532759"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680359"},{"key":"ref32","year":"2025","journal-title":"Seart github search engine"},{"key":"ref33","year":"2025","journal-title":"Git vuln finder"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3117771"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00064"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00126"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.3115\/1073083.1073135"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC66645.2025.00015"},{"key":"ref39","year":"2025","journal-title":"Patch for cve-2017\u20131000207"},{"key":"ref40","year":"2025","journal-title":"src2abs: a tool that abstracts java source code"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3067156"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380338"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598135"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00199"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3639478.3647634"},{"key":"ref46","article-title":"Repair ingredients are all you need: Improving large language model-based program repair via repair ingredients search","author":"Zhang","year":"2025","journal-title":"arXiv preprint"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/APR66717.2025.00007"},{"key":"ref48","article-title":"Vulnrepaireval: An exploit-based evaluation framework for assessing large language model vulnerability repair capabilities","author":"Wang","year":"2025","journal-title":"arXiv preprint"},{"key":"ref49","article-title":"Gpt-4o system card","author":"Hurst","year":"2024","journal-title":"arXiv preprint"},{"key":"ref50","article-title":"Gemini 2.5: Pushing the frontier with advanced reasoning, multimodality, long context, and next generation agentic capabilities","author":"Comanici","year":"2025","journal-title":"arXiv preprint"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2019.00020"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-024-10506-z"},{"key":"ref53","year":"2025","journal-title":"Owasp top ten 2021"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.104"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-008-9077-5"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2013.6606626"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.65"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.76"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2019.8667970"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-019-09780-z"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00020"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227211"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00071"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/2048147.2048149"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_13"},{"key":"ref66","article-title":"Data-driven vulnerability detection and repair in java code","author":"Zhang","year":"2021","journal-title":"arXiv preprint"}],"event":{"name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)","location":"Limassol, Cyprus","start":{"date-parts":[[2026,3,17]]},"end":{"date-parts":[[2026,3,20]]}},"container-title":["2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11576582\/11576527\/11576660.pdf?arnumber=11576660","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T05:17:33Z","timestamp":1783055853000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11576660\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,17]]},"references-count":66,"URL":"https:\/\/doi.org\/10.1109\/saner67736.2026.00038","relation":{},"subject":[],"published":{"date-parts":[[2026,3,17]]}}}