Anthropic Glasswing Finds 38,000 Flaws but Fixes Only 217

1 reports archived1 independent sourcesupdated 11/12/2026, 15:55:11

Synthesis & Latest Updates

1 Sources Cross-Validated

VulnCheck's tracking shows that seven months into Anthropic's Project Glasswing, Claude has produced 37,966 candidate vulnerabilities while only 217 have been recorded as fixed publicly, with roughly 12,000 new candidates but just 15 new fixes in the past two months. With 419 retractions and 1,654 duplicates, the data exposes a severe mismatch between AI-driven vulnerability discovery and the open-source community's capacity to remediate.

LATEST/VulnCheck's tracking shows that seven months into Anthropic's Project Glasswing, Claude has produced 37,966 candidate vulnerabilities while only 217 have been recorded as fixed publicly, with roughly 12,000 new candidates but just 15 new fixes in the past two months. With 419 retractions and 1,654 duplicates, the data exposes a severe mismatch between AI-driven vulnerability discovery and the open-source community's capacity to remediate.

Hourly heat curve

6 fully observed hours

Now

10.7

Peak

12.016:00

24h change

–

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

Coverage timeline

Total 1 reports · Latest first

量子位官网T2Nov 12, 15:55·78 pts
Anthropic Glasswing Finds 38,000 Flaws but Fixes Only 217
- Seven months of Glasswing yielded 37,966 candidate vulnerabilities versus only 217 public fixes, a remediation rate under 1%
- Roughly 12,000 new candidates but just 15 new fixes in two months, with the gap widening fast
- 419 retractions and 1,654 duplicates raise questions about the quality and deduplication of AI-found flaws
View Related Reports & Analysis Original Source