DEVELOPER ASSIST & TRIAGE AGENT

1-Click Automated Remediation & PR Generator

AI-generated, AST-validated secure code patches and unit tests ready to merge directly into GitHub/GitLab.

Actionable Findings

CWE-89: SQL Injection via Raw Template String

src/controllers/authController.ts · CWE-89 / CVSS 9.8

AST-Verified Git Diff

--- a/src/controllers/authController.ts
+++ b/src/controllers/authController.ts
@@ -24,3 +24,3 @@ export async function findUser(username: string) {
-  const query = "SELECT * FROM users WHERE username = '" + username + "'";
-  return await db.raw(query);
+  const query = 'SELECT * FROM users WHERE username = $1';
+  return await db.query(query, [username]);
 }

Generated Jest Security Regression Test

describe("authController Security Tests", () => {
  it("should prevent SQL injection payloads with single quotes", async () => {
    const payload = "admin' OR '1'='1";
    const result = await findUser(payload);
    expect(result.length).toBe(0);
  });
});