Loading…
Findings
All 195 true positives
Confirmed AI-contributed vulnerabilities. Open a finding to see the AI change, root cause, and minimum fix.
1–20 of 195 cases
- 2026-08-10
gitpython-developers/gitpython
- Root cause
- Path & link handling
- AI contribution
- Incomplete remediation
- Language
Python- AI tool
ChatGPT/Codex
- 2026-08-10
roskus/prospero-flow-crm
- Root cause
- Authentication & access control
- AI contribution
- Incomplete remediation
- Language
PHP- AI tool
Claude
- 2026-08-10
gitpython-developers/gitpython
- Root cause
- Injection & unsafe execution
- AI contribution
- Incomplete remediation
- Language
- Python
- AI tool
- ChatGPT/Codex
- 2026-08-07
go-git/go-git
- Root cause
- Path & link handling
- AI contribution
- Incomplete remediation
- Language
Go- AI tool
- Claude
- 2026-08-07
gitpython-developers/gitpython
- Root cause
- Injection & unsafe execution
- AI contribution
- Direct introduction
- Language
- Python
- AI tool
- ChatGPT/Codex
- 2026-08-06
nearai/ironclaw
- Root cause
- Injection & unsafe execution
- AI contribution
- Causal contribution
- Language
Rust- AI tool
- Claude
- 2026-08-04
open-webui/open-webui
- Root cause
- Authentication & access control
- AI contribution
- Direct introduction
- Language
- Python
- AI tool
- Claude
- 2026-08-03
gitpython-developers/gitpython
- Root cause
- Injection & unsafe execution
- AI contribution
- Incomplete remediation
- Language
- Python
- AI tool
- ChatGPT/Codex
- 2026-08-03
fastify/fast-uri
- Root cause
- SSRF & network boundaries
- AI contribution
- Incomplete remediation
- Language
JavaScript- AI tool
- Claude
- 2026-07-30
arnasdon/wacrm
- Root cause
- Validation & fail-open logic
- AI contribution
- Direct introduction
- Language
TypeScript- AI tool
- Claude
- 2026-07-28
fission/fission
- Root cause
- Authentication & access control
- AI contribution
- Direct introduction
- Language
- AI tool
- Claude
- 2026-07-28
koxudaxi/datamodel-code-generator
- Root cause
- Path & link handling
- AI contribution
- Flawed AI-written code
- Language
- Python
- AI tool
- Claude
- 2026-07-28
fission/fission
- Root cause
- Validation & fail-open logic
- AI contribution
- Incomplete remediation
- Language
- Go
- AI tool
- Claude
- 2026-07-28
fission/fission
- Root cause
- Validation & fail-open logic
- AI contribution
- New attack surface
- Language
- Go
- AI tool
- Claude
- 2026-07-28
koxudaxi/datamodel-code-generator
- Root cause
- SSRF & network boundaries
- AI contribution
- Flawed AI-written code
- Language
- AI tool
- Claude
- 2026-07-24
gitpython-developers/gitpython
- Root cause
- Injection & unsafe execution
- AI contribution
- Incomplete remediation
- Language
- Python
- AI tool
- ChatGPT/Codex
- 2026-07-24
open-webui/open-webui
- Root cause
- Path & link handling
- AI contribution
- Incomplete remediation
- Language
- Python
- AI tool
- Claude
- 2026-07-24
budibase/budibase
- Root cause
- Authentication & access control
- AI contribution
- Direct introduction
- Language
- TypeScript
- AI tool
- Claude
- 2026-07-24
microsoft/kiota
- Root cause
- Injection & unsafe execution
- AI contribution
- Incomplete remediation
- Language
C#- AI tool
GitHub Copilot
- 2026-07-24
gitpython-developers/gitpython
- Root cause
- Injection & unsafe execution
- AI contribution
- Incomplete remediation
- Language
- Python
- AI tool
- ChatGPT/Codex
| Advisory | Repository | Language | Root cause | AI contribution | AI tool | Published |
|---|---|---|---|---|---|---|
| GHSA-3WXW-XV34-2FRG | gitpython-developers/gitpython | Python | Path & link handling | Incomplete remediation | ChatGPT/Codex | 2026-08-10 |
| CVE-2026-59233 (GHSA-4FXP-2M36-QV64) | roskus/prospero-flow-crm | PHP | Authentication & access control | Incomplete remediation | Claude | 2026-08-10 |
| GHSA-5XXX-QHH7-9287 | gitpython-developers/gitpython | Python | Injection & unsafe execution | Incomplete remediation | ChatGPT/Codex | 2026-08-10 |
| CVE-2026-71556 (GHSA-HC8V-WWC9-VGXM) | go-git/go-git | Go | Path & link handling | Incomplete remediation | Claude | 2026-08-07 |
| GHSA-WVPP-8HX9-P66J | gitpython-developers/gitpython | Python | Injection & unsafe execution | Direct introduction | ChatGPT/Codex | 2026-08-07 |
| CVE-2026-18980 (GHSA-CW23-QWR7-C655) | nearai/ironclaw | Rust | Injection & unsafe execution | Causal contribution | Claude | 2026-08-06 |
| CVE-2026-70485 (GHSA-8X5V-CPV7-8JJP) | open-webui/open-webui | Python | Authentication & access control | Direct introduction | Claude | 2026-08-04 |
| GHSA-539M-9XH6-Q6RR | gitpython-developers/gitpython | Python | Injection & unsafe execution | Incomplete remediation | ChatGPT/Codex | 2026-08-03 |
| CVE-2026-18446 (GHSA-7P8R-X3MC-P8W7) | fastify/fast-uri | JavaScript | SSRF & network boundaries | Incomplete remediation | Claude | 2026-08-03 |
| GHSA-8JQH-598V-RFXC | arnasdon/wacrm | TypeScript | Validation & fail-open logic | Direct introduction | Claude | 2026-07-30 |
| CVE-2026-50569 | fission/fission | Authentication & access control | Direct introduction | Claude | 2026-07-28 | |
| CVE-2026-55389 (GHSA-8359-H9FX-J6V9) | koxudaxi/datamodel-code-generator | Python | Path & link handling | Flawed AI-written code | Claude | 2026-07-28 |
| CVE-2026-50570 (GHSA-QF5V-M7P4-95RP) | fission/fission | Go | Validation & fail-open logic | Incomplete remediation | Claude | 2026-07-28 |
| CVE-2026-50568 (GHSA-R5JH-Q2MW-GCX4) | fission/fission | Go | Validation & fail-open logic | New attack surface | Claude | 2026-07-28 |
| GHSA-RFR2-MQ9M-X2QX | koxudaxi/datamodel-code-generator | SSRF & network boundaries | Flawed AI-written code | Claude | 2026-07-28 | |
| GHSA-3RP5-JJMW-4WV2 | gitpython-developers/gitpython | Python | Injection & unsafe execution | Incomplete remediation | ChatGPT/Codex | 2026-07-24 |
| CVE-2026-59221 (GHSA-FRVJ-C5QP-XJ4W) | open-webui/open-webui | Python | Path & link handling | Incomplete remediation | Claude | 2026-07-24 |
| CVE-2026-73308 (GHSA-GH4H-34GR-87R7) | budibase/budibase | TypeScript | Authentication & access control | Direct introduction | Claude | 2026-07-24 |
| GHSA-P5RM-JG5C-8C77 | microsoft/kiota | C# | Injection & unsafe execution | Incomplete remediation | GitHub Copilot | 2026-07-24 |
| GHSA-R9MR-M37C-5FR3 | gitpython-developers/gitpython | Python | Injection & unsafe execution | Incomplete remediation | ChatGPT/Codex | 2026-07-24 |