SOURCE-LINKED INTELLIGENCE

Exploring Automated Vulnerability Identification in JavaScript Code Using Large Language Models

arXiv · AI, language, vision and robotics · article · Sep 12, 2026 · UTC

JavaScript powers approximately 98.8% of all websites, making vulnerabilities in its code a significant security risk, yet existing detection approaches such as Static Application Security Testing (SAST) tools often fail to identify many real-world vulnerabilities when applied to isolated code snippets. This paper presents an empirical study of Large Language Model (LLM)-based vulnerability identification for JavaScript programs, evaluating three LLM families (Gemini 1.5 Flash, GPT-4o Mini, DeepSeek-R1-Distill-Llama-8B) across multiple prompting strategies (zero-shot, chain-of-thought, few-sho

Read original source ↗ Open in workspace

recordType

paper

region

Global