# Anthropic launches free OSS Scanner using Claude Mythos for open-source projects

Digest AI · Research · published 2026-10-25T11:32:29Z

Canonical: https://digestai.news/story/anthropic-launches-free-oss-scanner-using-claude-mythos-for-open-sourc

## Summary

Anthropic released OSS Scanner on October 8, a free opt-in program that runs its strongest models, including Claude Mythos, against enrolled open-source codebases. The scanner operates on Anthropic's infrastructure in isolated VMs without internet access. Maintainers enroll by submitting a pull request with a Dockerfile, and reports go directly to them without human review.

In the first 11 days, 114 projects were accepted from about 650 applications. The system produced 77 critical and 803 high model-rated findings. Anthropic's penetration testers audited 97 critical and high findings across 48 projects: 85 (88%) met the coordinated vulnerability disclosure bar, 11 duplicated known issues, and 1 was invalid. wolfSSL reported 72 of 74 findings were valid, with 5 becoming CVEs. curl patched CVE-2026-92392, a high-severity HTTP/2 use-after-free affecting versions 8.12.0 to 8.22.0, fixed in 8.23.0 released October 14, 2026. The broader CVD dashboard shows 6,157 disclosed vulnerabilities across 591 projects as of October 2, with 516 patched.

## Key points

- 114 projects accepted from 650 applications in first 11 days since October 8 launch
- 77 critical and 803 high model-rated findings reported; 88% of 97 audited findings valid
- curl patched CVE-2026-92392; wolfSSL confirmed 72 of 74 reports valid with 5 CVEs

## Why it matters

Free AI-powered vulnerability scanning for critical open-source infrastructure shifts triage burden to maintainers but delivers high-accuracy findings at scale, with real CVEs already produced.

## Sources

1. [Anthropic Launches OSS Scanner, a Free AI Vulnerability Scanner](https://marktechpost.com/2026/10/25/anthropic-launches-oss-scanner-a-free-ai-vulnerability-scanner) (MarkTechPost, 2026-10-25)

## Cite

Digest AI, "Anthropic launches free OSS Scanner using Claude Mythos for open-source projects", 25 October 2026, https://digestai.news/story/anthropic-launches-free-oss-scanner-using-claude-mythos-for-open-sourc

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/anthropic-launches-free-oss-scanner-using-claude-mythos-for-open-sourc.json