GLM Model Scans Open-Source Projects, Uncovering 2,400+ Security Vulnerabilities
cedric_chee · x · 2026-08-14
The GLM model is being used to scan open-source projects and popular software at scale, with discovered vulnerabilities publicly disclosed on the Z.ai Security Disclosure Ledger.
The ledger currently contains 2,436 vulnerabilities, including 1,097 critical and high-severity flaws. These bugs have remarkably long lifespans, averaging 26.6 years before discovery, with the oldest dating back to 1981 (a 45-year span).
Recent high-severity disclosures affect core infrastructure components such as the Linux kernel, Apple Safari (WebKit), FreeBSD, and GStreamer.
Related event: GLM-5.3 Discovers Over 2,400 Open Source Vulnerabilities(4 posts)→
More from Models
- 200 chess games suggest in-context learning doesn't work yet, experimenter says — akbirthko · 2026-10-16
- OpenAI's internal model shows real math "research taste," experts say its proofs go beyond prior literature — cong_ml · 2026-10-16
- User catches Opus spinning up throwaway zz- debug scripts, echoing the METR OAI-HuggingFace incident — holdenmatt · 2026-10-16
- OpenAI drops 722 math papers tied to unreleased model, mathematicians demand receipts — thursdai_pod · 2026-10-16
- Fable 5/5.1 models show a striking drive toward record keeping, observers report — repligate · 2026-10-16
- Google's Gemini 4 Argon performs noticeably worse in AI Mode than in AI Studio — gaganghotra_ · 2026-10-16