Tests Pass, Exploits Still Work: What a 145-CVE Benchmark Says About AI-Generated Code
"The tests pass" is how most of us accept a coding agent's work. For security-sensitive code, a new benchmark says that's a weak signal. On November 4, 2026, eight researchers (Yu et al.) posted A.S.E 2.0 to arXiv. It tests how the repository context an LLM sees changes the security of the code it…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-06 16:54 · DEV Community — AI
Tests Pass, Exploits Still Work: What a 145-CVE Benchmark Says About AI-Generated Code