Views
No views yet
| Category | CWE | Severity |
|---|---|---|
| SQL Injection | CWE-89 | Critical |
| Command Injection | CWE-78 | Critical |
| Hardcoded Secrets | CWE-798 | Critical |
| Insecure Deserialization | CWE-502 | Critical |
| XML External Entity (XXE) | CWE-611 | High |
| Path Traversal | CWE-22 | High |
| Server-Side Request Forgery | CWE-918 | High |
| Unsafe Deserialization | CWE-502 | High |
1from peft import PeftModel
2from transformers import AutoModelForCausalLM, AutoTokenizer
3import torch
4
5base_model = AutoModelForCausalLM.from_pretrained(
6 "Qwen/Qwen2.5-7B-Instruct",
7 torch_dtype=torch.float16,
8 device_map="auto"
9)
10model = PeftModel.from_pretrained(base_model, "NiffyHunt90/codeguard-security-7b")
11tokenizer = AutoTokenizer.from_pretrained("Qwen/Qwen2.5-7B-Instruct")
12
13code = '''
14query = "SELECT * FROM users WHERE id = " + user_input
15cursor.execute(query)
16'''
17prompt = f"Analyze this code for security vulnerabilities:\n{code}"
18inputs = tokenizer(prompt, return_tensors="pt").to(model.device)
19outputs = model.generate(**inputs, max_new_tokens=200)
20print(tokenizer.decode(outputs[0], skip_special_tokens=True))