TY - RPRT TI - Who Said CVE? How Vulnerability Identifiers Are Mentioned by Humans, Bots, and Agents in Pull Requests AU - Pien Rooijendijk AU - Christoph Treude AU - Mairieli Wessel PY - 2026 DO - 10.1145/3793302.3793616 UR - https://arxiv.org/abs/2601.19636 ID - 2601.19636 ER -