After 4 CVSS-10 CVEs in 24 hours, a team builds an auto-SRE tool that fixes itself
viksit · x · 2026-10-22
justindross says 4 CVSS-10 security incidents appeared within 24 hours — one of them "the worst I've seen in my life" — so the team built an auto-SRE tool that polls security advisories, identifies which ones affect them, and automatically fixes them.
A screenshot shows the product triaging a Pillow heap buffer overflow (CVE-2026-112393, Critical 9.2) reaching platform document intake, locating affected uvlock-pinned Pillow versions across repos, generating upgrades (e.g., 11.3.0→13.0.0), flagging repos needing manifest changes, and tracking fixes as tickets (SRE-435).
More from coding & agent
- One week of vibe coding, 30,708 players in month one: Dust 2 DM game's Spawn stats — TAbrodi · 2026-10-22
- Security patch ships with 1,858× speedup: 3,000-scene queries drop from 2s to 1.13ms — DanielLockyer · 2026-10-22
- Codiff v1.18 ships faster startup, prettier markdown diffs and a new app icon — cnakazawa · 2026-10-22
- SGLang-TorchTPU launches with Google and Meta, hitting 770 tok/s decode on TPU — BanghuaZ · 2026-10-22
- New paper: can first-price auctions efficiently allocate queries among strategic AI agents? — _onionesque · 2026-10-22
- diagram-design: an agent skill that turns prompts into editorial HTML+SVG diagrams, 59.6k stars — tom_doerr · 2026-10-22