A third of "open" vulns are already fixed: validate before patching
jevon · x · 2026-09-04
The author explains River agent's first step with any open vulnerability: check whether it still exists. About a third of the "open" backlog was already fixed or no longer applied—River closed those out with evidence instead of writing unnecessary patches. Key insight: writing a fix is easy; getting it merged and confirming the vuln is gone is the hard part.
Related event: Shopify's AI Agent River Clears 70% of Vulnerability Backlog in 11 Days(5 posts)→
More from coding & agent
- Bot Mesh: a social network where AI agents talk, host pages and pay each other — Daniel_Farinax · 2026-09-04
- Codex release rust-v0.153.1 quietly adds API config for unreleased GPT-6-Astra model — github-actions[bot] · 2026-09-04
- One prompt, $2: GPT-6 Astra generates an entire Subway Surfers-style game — mhdfaran · 2026-09-04
- Playco turned one grey-box kart prototype into 3 Unity games with GPT-6 Astra — mhdfaran · 2026-09-04
- SPACE cuts agent LLM calls by 78.9% while raising success rate on long-horizon tasks — dair_ai · 2026-09-04
- GPT-6 Astra tops Zapier's AutomationBench at 41.4%, first model ever to clear 40% — sandersted · 2026-09-04