Research questionHow can vulnerability-fixing history be reused to detect and repair similar undisclosed flaws in other code?Vulnerability databases and fixing commits explain how known flaws were removed, but their code-level lessons are difficult to apply systematically to code without a known advisory. The challenge is identifying genuinely similar unsafe conditions and validating that proposed repairs address them without introducing new behavior changes.