VulnCheck audit: Anthropic's Glasswing logged 442 CVEs but only 217 fixes in 7 months
jedisct1 · x · 2026-11-11
VulnCheck's seven-month tracking of Anthropic's Project Glasswing reveals a widening gap between vulnerability discovery and remediation: 37,966 reported findings produced 442 CVEs (0.5% of all CVEs this year, only 2 exploited in the wild), with just 217 marked fixed. Since September, 12,000 new findings added but only 15 additional fixes. Some 1,654 findings (4.4%) marked duplicates—nearly 8x the number fixed—and 419 withdrawn, raising questions about Anthropic's claimed true-positive rate rising from 90.8% to 94.2%. Its OSS Scanner shifts validation onto maintainers: curl rejected 19 of 34 published reports, confirmed 6 as low severity, with 9 still pending.
More from Companies & People
- beehiiv hackathon teased: free entry and a $200k prize pool — kylegawley · 2026-11-11
- AI Engineer conference hands out joke "AGI Pills" bottles for cognitive upgrade — TheTuringPost · 2026-11-11
- Anthropic says Claude ported kernels to run on AMD GPUs in just 3 days — scottleibrand · 2026-11-11
- Jensen Huang admits affair in all-hands email as Nvidia board opens national security probe — generativist · 2026-11-11
- Claude's blank-canvas release hits 70 SaaS tools, but Miro already sold at 8 cents on the dollar — aakashgupta · 2026-11-11
- X tests "Videos for you" feed, a TikTok-style video tab — Kyrannio · 2026-11-11