Towards assisted remediation of security vulnerabilities