Why would you need a human to fix it if you know what the CVE is.