Anthropic launches opt-in OSS Scanner for open-source vulnerabilities

Anthropic has launched OSS Scanner, a free opt-in service that uses its models, including Claude Mythos, to send maintainers periodic vulnerability reports with reproducers and candidate patches, without human review. Over six months the models flagged more than 29,000 candidate vulnerabilities, of which about 6,000 were manually triaged.

• Models flagged over 29,000 candidate vulnerabilities in six months
• About 6,000 reports were manually triaged; ~5,000 more sent on request
• 85 of 97 assessed findings met coordinated disclosure criteria
• curl 8.23.0 fixed CVE-2026-92392 found via OSS Scanner