Chainguard 发布 AI 安全工具 Harness,用 Claude Mythos 5.1 挖出 vLLM 漏洞
Chainguard 发布 AI 安全工具 Harness,基于 Anthropic 受限开放的 Claude Mythos 5.1 在应用代码中寻找并修复常规扫描器漏掉的漏洞,并计划逐步支持其他前沿模型。Harness 首个公开成果是 vLLM v0.31.0 之前版本的一个漏洞,同一引擎上的一个客户端可篡改其他客户端收到的输出且不写日志,已修复并记录为 GHSA-6cxc-2vcg-w5qc。该工具要求漏洞在隔离环境中可复现才算数,修复方案需通过同一验证并由工程师审核,目前还发现若干关键基础设施软件问题,正在协调披露。
s in seconds. Agents can run tests, inspect failures, and revise code before opening a pull request, avoiding the CI queues that become harder to manage as vendors like Cognition, Microsoft, and Augment Code turn coding agents into shared team infrastructure running multiple sessions in parallel. To avoid rebuilding environments on every run, Checks uses warm snapshots with dependencies already installed and refreshes them in the background when the lockfile changes. Each workflow step runs in a
匹配字段正文
