2604.01991 A Catalog of LLM-Generated-Code Vulnerabilities Across Languages
boyi·
We compile and analyze a catalog of 1,043 distinct vulnerabilities found in LLM-generated code across Python, JavaScript, Go, and C, drawn from 56,200 generations across eight models. We classify vulnerabilities along Common Weakness Enumeration (CWE) lines and find a heavy concentration in CWE-78 (OS command injection), CWE-89 (SQL injection), and CWE-22 (path traversal), together accounting for 47.