Everything You Need for
Secure Development

// Example vulnerability detection output
{
  "vulnerability": {
    "id": "CVE-2024-12345",
    "severity": "HIGH",
    "type": "SQL Injection",
    "location": "src/api/users.js:42:15",
    "description": "Unsanitized user input in database query",
    "cwe": "CWE-89"
  },
  "affectedCode": "const query = `SELECT * FROM users WHERE id = ${userId}`",
  "recommendation": "Use parameterized queries or ORM"
}

// ❌ Before (Vulnerable)
const getUserById = (userId) => {
  const query = `SELECT * FROM users WHERE id = ${userId}`;
  return db.execute(query);
};

// ✅ After (Patched by PatchPilot)
const getUserById = (userId) => {
  // Using parameterized query to prevent SQL injection
  const query = 'SELECT * FROM users WHERE id = ?';
  return db.execute(query, [userId]);
};

// Additional validation added
if (!Number.isInteger(userId) || userId < 1) {
  throw new ValidationError('Invalid user ID');
}

## 🛡️ Security Patch: SQL Injection Fix (CVE-2024-12345)

### Vulnerability Summary
- **Severity**: HIGH
- **Type**: SQL Injection (CWE-89)
- **Affected**: `src/api/users.js:42`

### Changes Made
- Replaced string concatenation with parameterized queries
- Added input validation for user ID parameter
- Updated related test suite with injection attack scenarios

### Test Results
✅ All 47 tests passed (12 new security tests added)
✅ 98% code coverage maintained
✅ Performance benchmarks: -2ms average response time

### Rollback Plan
If issues arise, revert with: `git revert abc123def`
Previous behavior restored in < 30 seconds with zero downtime.