Anthropic's OSS Scanner Skips Human Review and the Public Advisory
Anthropic's OSS Scanner sends unreviewed, model-written bug reports to open-source maintainers and publishes nothing. Its disclosure pipeline has 516 of 6,157 findings patched and 584 identifiers issued, so many fixes will reach your dependencies with no CVE for your SCA tool to flag.
October 8, 2026 · 9 min read