GitHub Repository

Variant analysis, open-sourced. Feed a CVE patch, find every structural twin across your codebase. 6-stage pipeline: patch ingestion, LLM signature extraction, embedding search, Joern CPG slicing, LLM feasibility reasoning, SARIF reporting.

5 starsRust

Naptrace – find structural twins of a CVE in your codebase

Name: Naptrace – find structural twins of a CVE in your codebase
Availability: InStock
Author: kenshi144

by kenshi144·Apr 20, 2026·1 point·1 comment

Visit Project View on HN

AI Analysis

●●SolidBig BrainNiche Gem

Six-stage pipeline with Joern CPG and LLM reasoning beats simple pattern matching.

Strengths

•CPG path slicing plus LLM feasibility verdicts reduces false positives significantly
•Accepts patches from CVE IDs, git commits, diff files, or PR URLs flexibly
•SARIF reporting integrates with existing security tooling workflows

Weaknesses

•Security scanning is well-funded with GitHub Advanced Security and Semgrep competing
•LLM-based reasoning may produce inconsistent results across different vulnerability types