=== Variant 1: Original Value Injection === Input value: ' OR '1'='1 Escape result: ERROR - ' OR '1'='1 is not allowed as a JSON query value Status: BLOCKED by escapeSQLValue === Variant 2: Patch Bypass (LIKE/contains operators) === Testing with LIKE operator: Input value: ' OR '1'='1 /root/.pruva/runs/ghsa-xx6w-jxg9-2wh8_20260219-190302/vuln_variant/test_variants.js:19 throw new Error(`${value} is not allowed as a JSON query value`); ^ Error: ' OR '1'='1 is not allowed as a JSON query value at escapeSQLValue (/root/.pruva/runs/ghsa-xx6w-jxg9-2wh8_20260219-190302/vuln_variant/test_variants.js:19:11) at patchedSQLiteCreateJSONQuery_BUGGY (/root/.pruva/runs/ghsa-xx6w-jxg9-2wh8_20260219-190302/vuln_variant/test_variants.js:27:24) at Object. (/root/.pruva/runs/ghsa-xx6w-jxg9-2wh8_20260219-190302/vuln_variant/test_variants.js:91:18) at Module._compile (node:internal/modules/cjs/loader:1706:14) at Object..js (node:internal/modules/cjs/loader:1839:10) at Module.load (node:internal/modules/cjs/loader:1441:32) at Function._load (node:internal/modules/cjs/loader:1263:12) at TracingChannel.traceSync (node:diagnostics_channel:328:14) at wrapModuleLoad (node:internal/modules/cjs/loader:237:24) at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:171:5) Node.js v22.22.0