Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-29 · source-backed
Anil Madhavapeddy released a cohttp 6.3.0 path-traversal fix and found percent-encoded traversal probes hitting his live webserver about ten minutes after the public PR went up. He reproduced the exploit locally with an agent in under a minute, after Claude Fable refused and DeepSeek V4 Pro complied. In the HN thread, rclone maintainer Nick Craig-Wood reported over 40 security disclosures in the last month against roughly 20 in the project's first ten years, about 75% containing something real, with GitHub CVE assignment slipping from 2-3 days to 3-4 weeks. rclone now ships releases marked CVE-PENDING. Madhavapeddy's argument is that embargo-based open source security process no longer buys any time. I think he's right, and I don't know what replaces it. (anil.recoil.org)
Each link below shares sources, entities, or timing with this story.
Claude Fable built by Anthropic / Shared entity: DeepSeek V4 Pro / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Fable built by Anthropic); both cover DeepSeek V4 Pro; overlapping topics (agent, claude).
DeepSeek released DeepSeek V4 Pro / Shared entity: Claude Fable / Earlier coverage
Linked by a graph relationship (DeepSeek released DeepSeek V4 Pro); both cover Claude Fable; earlier Claude Fable coverage from 2026-07-12.
Claude Fable built by Anthropic / Shared entity: CVE / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Fable built by Anthropic); both cover CVE; overlapping topics (against, agent).
DeepSeek released DeepSeek V4 Pro / Shared topic
Linked by a graph relationship (DeepSeek released DeepSeek V4 Pro); overlapping topics (against, agent).
Claude Fable built by Anthropic / Shared topic
Linked by a graph relationship (Claude Fable built by Anthropic); overlapping topics (agent, claude).
AI Gateway uses DeepSeek V4 Pro / Shared entity: DeepSeek V4 Pro / Earlier coverage / Tension
Linked by a graph relationship (AI Gateway uses DeepSeek V4 Pro); both cover DeepSeek V4 Pro; earlier DeepSeek V4 Pro coverage from 2026-08-13.
Claude Fable built by Anthropic / Shared entity: CVE / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Fable built by Anthropic); both cover CVE; overlapping topics (agent, claude).
Linked by a graph relationship (Claude Fable built by Anthropic); both cover CVE; overlapping topics (agent, claude).