Naravel
Subscribe

Narratives AI & Agents

Anthropic’s OSS Scanner found 29,000 possible bugs; 516 were fixed

Supply chainOSS Scanner

Built from 2 signals across 2 sources · 100 items reviewed

Anthropic’s OSS Scanner shows that finding open-source defects is advancing faster than getting them remediated. On October 9, Anthropic launched the opt-in service after using Claude during Project Glasswing, while a reported 29,000 possible bugs led to only 516 fixes. The immediate engineering challenge is therefore triage and coordinated remediation, not simply discovering more findings.

  • Anthropic launched OSS Scanner on October 9 as an opt-in service for open-source projects.
  • Participating projects receive thorough, periodic security scans at no cost, using Anthropic’s strongest models.
  • Anthropic said the service was informed by its experience using Claude to find vulnerabilities during Project Glasswing.
  • Claude identified 29,000 possible bugs in open source, but only 516 had been fixed.
  • Caveat: the 29,000 figure describes possible bugs, so it should not be treated as 29,000 confirmed vulnerabilities.

Bottom line If you maintain open-source projects, consider opting into OSS Scanner and prepare an owner-and-remediation workflow before accepting its findings.

Signals2