Proceedings of the ACM on software engineering. • Vol 2 • No FSE
Mystique: Automated Vulnerability Patch Porting with Semantic and Syntactic-Enhanced LLM
June 2025 • Susheng Wu, Ruisi Wang, Yuhua Cao, Bihuan Chen, Zhuotong Zhou, Yiheng Huang, J. Zhao, Xin Peng
Branching repositories facilitates efficient software development but can also inadvertently propagate vulnerabilities. When an original branch is patched, other unfixed branches remain vulnerable unless the patch is successfully ported. However, due to inherent discrepancies between branches, many patches cannot be directly applied and require manual intervention, which is time-consuming and leads to delays in patch porting, increasing vulnerability risks. Existing automated patch porting approaches are prone to …