Tag: sast

LLM as a JavaScript Vulnerability Scanner: The 60% and the Rigged Zero

A new paper says LLMs catch 60% of JavaScript vulnerabilities and SAST catches zero. The zero is rigged. The per-CWE table underneath is what I'd…