News
Claude found 493 attack surface issues in 25 open source projects.
The analysis covered more than five million lines of code written notably in C, C++, Java, PHP and Python.
The eleven projects with authenticated access all had code reachable unintentionally.
In 94 cases, a combination of options silently disabled a security control.
In OpenSSH 10.4, about 4,500 lines of ML-DSA-44 code were reachable without authentication by default.