Claude flags nearly 500 worrying open source security issues — C, Java, and Python code all at risk as one flaw wasn't spotted for 21 years

Anthropic used Claude to analyze 25 open source projects and uncovered nearly 500 security issues Research found exposed pre-authentication code paths, conflicting security settings, and long-hidden flaws AI identified attack-surface reductions that removed unnecessary code exposure before vulnerabilities could be exploited Anthropic recently used Claude to analyze 25 major open source projects written in C, C++, Java, PHP, and Python, in search of security issues. It found almost 500 of them, including security controls turned off by conflicts in settings, sensitive code accessible before authentication, and even a vulnerability that sat in the code for 21 years. This wasn’t a standard hunt for vulnerabilities. In its report, Anthropic argues that looking for individual vulnerabilities is a Sisyphean task that scales poorly and never guarantees security.

First reported by TechRadar. This page is a short excerpt; the full text is theirs.