#vulnerable code 
                             public U fetchUser(@Valid @Email @NotBlank String email) {
		
		log.debug("Fetching user by email: " + email);

		U user = userRepository.findByEmail(email);
		LemonUtil.check("email", user != null,
			"com.naturalprogrammer.spring.userNotFound").go();
		
		user.decorate().hideConfidentialFields();
		
		log.debug("Returning user: " + user);		

		return user;
	} 
                            #location 9 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                             public U fetchUser(@Valid @Email @NotBlank String email) {
		
		log.debug("Fetching user by email: " + email);

		U user = userRepository.findByEmail(email)
			.orElseThrow(() -> MultiErrorException.of("email",
				"com.naturalprogrammer.spring.userNotFound"));

		user.decorate().hideConfidentialFields();
		
		log.debug("Returning user: " + user);		

		return user;
	}