Qualified static finding recorded.
CodeVetter · local evidence export
SQL injection in a TypeScript lookup
codevetter-public-benchmark/ts-sql-injection
needs review · medium confidence
Verification
No exact-current runtime evidence is included.
No audience validation occurred.
Finding
User input is interpolated into an executed SQL query
The lookup builds SQL with user-controlled email input instead of a parameterized query.
source.ts:13