Skip to content
Anthropic's Glasswing Project Faces Criticism Over Vulnerability Fixes

Anthropic's Glasswing Project Faces Criticism Over Vulnerability Fixes

First seen 11 Nov 2026, 17:03 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 17:09 UTC
  • •Only 217 out of 37,966 vulnerabilities found by Glasswing have been fixed.
  • •The project has seen a significant number of duplicate and withdrawn findings.
  • •Anthropic's true positive rate claims are questioned due to the low number of fixes.

Anthropic's Project Glasswing, aimed at identifying software vulnerabilities, has reported finding 37,966 vulnerabilities, but only 7349 (19.4%) are publicly acknowledged, with just 217 fixed. Vulnerability researcher Patrick Garrity from VulnCheck highlighted that since September, only 15 additional vulnerabilities were marked as fixed, despite nearly 12,000 new findings added. The project has also seen a significant number of duplicates and withdrawn reports, raising questions about the accuracy of Anthropic's claimed true positive rate of 94.2%. Anthropic has launched an Open Source Security Scanner to help maintainers manage vulnerability disclosures, but the effectiveness of this tool remains under scrutiny. The gap between vulnerability discovery and remediation continues to widen, raising concerns about the project's overall impact on software security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 10h ago How this analysis works

Timeline

2026-10-08
Anthropic announces OSS Scanner launch
Anthropic launched its Open Source Security Scanner to assist maintainers in managing vulnerability reports.
Infosecurity-Magazine
2026-11-02
Glasswing vulnerability dashboard update
Anthropic reported 37,966 vulnerabilities identified, with only 7349 publicly acknowledged and 217 fixed.
Infosecurity-Magazine
2026-11-09
VulnCheck report on Glasswing
Patrick Garrity released a report analyzing the effectiveness of Project Glasswing, highlighting the low number of fixes.
www.vulncheck.com

More articles in this cluster (2)

Following this threat?

Track Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2

Common questions

How many vulnerabilities have been fixed?
Only 217 out of 37,966 vulnerabilities identified by Glasswing have been marked as fixed.
What is the true positive rate claimed by Anthropic?
Anthropic claims a true positive rate of 94.2%, though this is questioned due to many duplicates and withdrawals.
What tool has Anthropic launched to assist maintainers?
Anthropic has launched the Open Source Security Scanner to help maintainers manage vulnerability disclosures.