{"data":{"id":"92c4b754-ebe0-47e5-ad59-7f857c43adf7","title":"SPLASH: Contrastive Audit Pressure for Detecting and Localizing Security Hallucinations in Generated Code","summary":"SPLASH is a method for detecting security hallucinations in LLM-generated code, which pass functional tests while staying insecure. It scores candidate programs using audit pressure, a contrast between teacher-forced log-probabilities under a security review and a style review. On 63,684 programs from 12 models across 899 tasks, it picks the secure program in 74% of cases and places the vulnerable statement first in 58% of insecure programs.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.26001v1","publishedAt":"2026-10-19T08:24:50.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-19T08:24:50.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}