OWASP Launches OASIS to Address Open Source Vulnerabilities

• •OWASP launched OASIS to fix open-source vulnerabilities using AI and human expertise.
• •The initiative aims to speed up the remediation of vulnerabilities identified in open-source software.
• •OASIS was announced on August 26, 2026, in San Francisco.

On August 26, 2026, OWASP announced the launch of the Open Automated Security Initiative for Software (OASIS). This initiative aims to bridge the gap between identifying vulnerabilities in open-source software and remediating them. By combining AI-generated patches with human validation from application security experts, OASIS seeks to accelerate the remediation process. The initiative is a response to the growing number of vulnerabilities that are discovered faster than they can be fixed. Organizations and researchers are expected to benefit from this collaborative effort, which aims to enhance the security of open-source projects. The initiative was unveiled in San Francisco and marks a significant step in addressing open-source security challenges. No specific CVEs or affected systems were mentioned in the articles.