VulnCheck says Glasswing fixed 217 of nearly 38,000 claimed flaws
Original title: Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says
Of 5,276 validated ledger entries, Garrity says 217 are fixed, and he disputes Anthropic's 94.2% true-positive rate.
VulnCheck researcher Patrick Garrity says Anthropic's Project Glasswing has produced few public fixes seven months after launch. Anthropic's November 2 dashboard lists 37,966 findings, with 7,349 on the public ledger and 217 marked fixed. Anthropic has cited human triage limits, launched OSS Scanner, and sent nearly 5,000 unverified reports to maintainers who requested them. cURL maintainer Daniel Stenberg said many reports he reviewed were not vulnerabilities.
Unconfirmed: Garrity disputes Anthropic's 94.2% true-positive rate, and Anthropic had not commented by publication.
- Anthropic's November 2 ledger lists 7,349 of 37,966 claimed findings.
- Garrity counts 5,276 unique validated issues, 1,654 duplicates and 419 withdrawals.
- From September to November, 4,613 entries were added and 15 marked fixed.
- Stenberg reviewed 34 of 45 cURL reports; 19 were not vulnerabilities.
- Anthropic said October 8 it had manually reviewed about 6,000 of over 29,000 candidates.
- Vendors
- Anthropic
- Products
- Project GlasswingOSS ScannercURL
- Organizations
- VulnCheckOpenPrinting
From the original article
3 min read at infosecurity-magazine.com
VulnCheck’s Patrick Garrity has found that seven months on, Project Glasswing resulted in only 217 vulnerabilities getting fixed, despite thousands reported
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.