An outside count of Anthropic's Glasswing findings: 37,966 reported, 217 fixed

Garrity has tracked CVEs attributed to Anthropic since April in a public repository, Anthropic Credited CVEs. He counts 442 so far, about 0.5% of the 93,450 CVEs published this year, with two known to be exploited in the wild. Reading Anthropic's own disclosure ledger as of its November 2 update, he reports 37,966 findings, 7,349 made public and 217 marked fixed. Between his September 8 and November 2 readings, findings rose by 11,813 and fixes by 15, while the ledger's claimed true positive rate rose to 94.2%.

The sharper figures come from curl. Daniel Stenberg received a batch of 45 vulnerability reports from Anthropic, which Garrity reads as a test of Anthropic's self-service OSS Scanner. Anthropic describes that scanner's reports, in Garrity's quotation, as "fully model-generated, without human review or triage". By Garrity's count, of the 34 published so far, 19 were marked not a vulnerability, 6 were confirmed as low severity and 9 were awaiting assessment. These are a vendor analyst's readings of public records; we have not re-derived them.

Why it matters: For anyone running agents that file findings against code they do not own, this puts a number on where the cost lands: validation did not go away, it moved to the people receiving the reports. A self-reported true positive rate is not the same measurement as what a maintainer accepts, and curl's partial tally of 6 confirmed out of 34 published is far from the ledger's 94.2%.