ANT-2026-GSV3GS1G · joomla · Path-traversal

path-traversal medium CVE-2026-40384 GHSA-hr66-rv65-f5r4 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-GSV3GS1G: Path...

ANT-2026-XKHXVCFV · supabase/postgres · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-XKHXVCFV: Root-executed binaries fetched from S3 without integrity check Several Ansible tasks admin-mgr.yml:11,...

ANT-2026-0JJXMV3G · supabase/auth · privilege-escalation

privilege-escalation medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0JJXMV3G: Passkey registration requires no step-up authentication The POST...

ANT-2026-GQ8G77M4 · supabase/auth · broken-access-control

broken-access-control medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-GQ8G77M4: Banned users retain authenticated endpoint access maybeLoadUserOrSession in...

ANT-2026-Y9HESEM8 · supabase/supabase · auth-bypass

auth-bypass medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-Y9HESEM8: AI data-sharing opt-in bypassed by mismatched org and project In...

ANT-2026-SJ7ZVBQB · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow medium Severity Claude high · Security research firm medium · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-SJ7ZVBQB: Heap-buffer-overflow in mpeg.h:70 While...

ANT-2026-PVN0XWJM · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-PVN0XWJM: Heap-buffer-overflow in copyblock.h:51...

ANT-2026-61Y3NTY3 · suricata · Use-after-free

use-after-free high GHSA-qmc9-vqq2-8mv3 Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-61Y3NTY3: Use-after-free in...

ANT-2026-6X60WXT0 · LibreOffice · Use-After-Free

use-after-free medium CVE-2026-6040 Severity Claude medium · Security research firm medium · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-6X60WXT0: Heap use-after-free writ...

ANT-2026-A5580GNM · xdao · logic-error / cross-tenant-confusion

logic-error high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-A5580GNM: XDAO CrowdfundingModule: cross-tenant token...

ANT-2026-SBF8X04Q · SELinux · Type Confusion

type-confusion medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-SBF8X04Q: Type confusion in CIL sensitivity alias...

ANT-2026-49KSKQPG · SELinux · Heap Buffer Overflow

heap-buffer-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-49KSKQPG: Heap buffer overflow in libsepol mapebitmap...

ANT-2026-3T6Q6WE9 · mpv · Heap Buffer Overflow

heap-buffer-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-3T6Q6WE9: Integer overflow in scaletempo audio filter...

ANT-2026-9R51NPJC · c-blosc2 · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-9R51NPJC: Heap buffer overflow in NDLZ8 triple-mat...

ANT-2026-3M3723P3 · binutils · Heap Buffer Overflow

heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-3M3723P3: Heap buffer overflow in FR30 ELF...

ANT-2026-SC8JK49A · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-SC8JK49A: Heap-buffer-overflow in ffmpeg FFmpeg's Dira...

ANT-2026-87DJGDRB · wolfssl · Heap-buffer-overflow

heap-buffer-overflow low CVE-2026-12340 GHSA-q349-x427-xg3w Severity Claude high · Security research firm high · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-87DJGDRB: Heap-buffer-overflow in sha.c:733 When...

ANT-2026-N6TD9MF6 · runc · Symlink-following

symlink-following medium CVE-2026-41579 GHSA-xjvp-4fhw-gc47 Severity Claude high · Security research firm high · Maintainer medium Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics...

ANT-2026-KC1Y51NF · openmeterio/openmeter · sql_injection

sql-injection medium GHSA-wc3v-3457-c8cm Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-KC1Y51NF: SQL injection in...

ANT-2026-PJV7Z0AR · open62541 · Integer Overflow

integer-overflow high CVE-2026-63559 CVE-2026-65423 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-PJV7Z0AR: Integer...

ANT-2026-CAH7XGSQ · lua · stack-overflow

stack-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-CAH7XGSQ: stack-overflow C stack exhaustion via unbounded...

ANT-2026-JBKARRJ7 · libvips · Out-of-bounds Write

oob-write low CVE-2026-35590 GHSA-jmwm-wc68-mhwm Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-JBKARRJ7: Out-of-bounds IFD...

ANT-2026-GSPVGEYA · gpg/libgcrypt · Stack Buffer Overflow

stack-buffer-overflow medium CVE-2026-41990 GHSA-78pv-qq8x-94px Severity Claude high · Security research firm - · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-GSPVGEYA: ML-DSA...

ANT-2026-QRYCJNAP · dnsmasq · Denial-of-service

denial-of-service medium CVE-2026-13002 CVE-2026-4890 Severity Claude high · Security research firm high · Maintainer medium Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-QRYCJNAP:...

ANT-2026-PCBAKVPB · dnsmasq · Heap-buffer-overflow

heap-buffer-overflow high CVE-2026-4892 GHSA-m62j-63mf-xr95 Severity Claude high · Security research firm high · Maintainer high Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits...

ANT-2026-19SGCVZZ · Alembic · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-19SGCVZZ: Heap buffer overflow in Ogawa...

ANT-2026-HFGGE6HR · asterisk/asterisk · stack_buffer_overflow

stack-buffer-overflow critical GHSA-589g-qgf8-m6mx Severity Claude critical · Security research firm critical revised; sealed as high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits...

ANT-2026-XBE9HJ4Y · moodle · Path-traversal

path-traversal high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ophion Security. ANT-2026-XBE9HJ4Y: Path Traversal → Arbitrary File Write → RCE ...

ANT-2026-QQ2P9M9V · openexr · Heap-buffer-overflow

heap-buffer-overflow high CVE-2026-45696 Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-QQ2P9M9V: Heap-buffer-overflow in...

ANT-2026-QPYFFTMS · gdal · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude critical · Security research firm high revised; sealed as critical · Maintainer - Discovered by Claude Sonnet 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-QPYFFTMS:...

ANT-2026-8AZGCAHG · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8AZGCAHG: Heap-buffer-overflow in gdal Running th...

ANT-2026-2FETJP49 · randombit/botan · Improper Certificate Validation

improper-cert-validation high CVE-2026-34580 GHSA-v782-6fq4-q827 Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-2FETJP49: security certificateknown: Complete x509 bypass CertificateStore::certificateknown...

ANT-2026-5DFBSQR9 · freebsd/freebsd-src · Use-After-Free / Type Confusion

use-after-free high CVE-2026-5398 CVE-2026-6386 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-5DFBSQR9: Local privilege escalation via ttydropctty tsession UAF + pmappkruupdaterange PDPE walk In...

ANT-2026-HHD77M82 · joomla · Path-traversal

path-traversal high CVE-2026-40383 GHSA-v8h9-9g8j-w7h4 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-HHD77M82: Path Traversa...

ANT-2026-CGR7Y3J8 · supabase/auth · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-CGR7Y3J8: OAuth authorization code single-use not enforced atomically In the authorizationcode grant handler of the...

ANT-2026-6YNNSAA0 · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6YNNSAA0: Image-generation function fetches arbitrary caller URL with service-role in scope The...

ANT-2026-C0BW3XD3 · dlplibs · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-C0BW3XD3: Heap-buffer-overflow in MSPUBParser.cpp:1575 When...

ANT-2026-H4RM2RMD · htslib · Out-of-Bounds Access

oob-read medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-H4RM2RMD: Out-of-bounds access in CRAM xpack/xrle...

ANT-2026-203E7E95 · twigphp/Twig · auth_bypass

auth-bypass high CVE-2026-46639 GHSA-mm6w-gr99-p3jj Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-203E7E95: Sandbox...

ANT-2026-WCSVRYAX · suricata · heap-use-after-free

use-after-free high GHSA-59q6-j4w8-8pjx Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-WCSVRYAX: heap-use-after-free in...

ANT-2026-GSDN3H7W · OpenSC · Stack Buffer Overflow

stack-buffer-overflow low CVE-2026-40528 Severity Claude low · Security research firm low · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-GSDN3H7W: Stack buffer overflow in...

ANT-2026-1ZNMP148 · NSS · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-6772 GHSA-c2q7-642g-3vwr Severity Claude medium · Security research firm medium · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-1ZNMP148:...

ANT-2026-Q5A1RHS0 · libssh2/libssh2 · double_free

double-free high CVE-2026-66032 Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-Q5A1RHS0: SFTP double-free via server-controlled...

ANT-2026-Z477W54M · ClamAV · Integer Underflow

integer-underflow high CVE-2026-20214 GHSA-86w7-h9x4-hpxv Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-Z477W54M:...

ANT-2026-XGXD0ZVD · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-XGXD0ZVD: Heap-buffer-overflow in gpb.h:288 GDAL's OS...

ANT-2026-XV1EVAMH · libreoffice · Heap-buffer-overflow

heap-buffer-overflow medium CVE-2026-8357 Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Sonnet 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-XV1EVAMH: Heap-buffer-overflow i...

ANT-2026-YN5QG0SH · libreoffice · Heap-buffer-overflow

heap-buffer-overflow medium CVE-2026-8358 Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-YN5QG0SH: Heap-buffer-overfl...

ANT-2026-WNRZ9D35 · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-WNRZ9D35: Heap-buffer-overflow in gdal The...

ANT-2026-69D8H6RP · TryGhost/Ghost · SQL Injection

sql-injection critical CVE-2026-26980 GHSA-w52v-v783-gw97 Severity Claude critical · Security research firm - · Maintainer critical REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-69D8H6RP: Critical Vulnerability CVSS 9.1 : SQLi from unauthenticated user; arbitrary DB...

ANT-2026-XJKJSANG · supabase/auth · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-XJKJSANG: Azure issuer check uses always-true boolean expression In the Azure external auth provider azure.go:72, t...