Skip to content

Topics
Contributors
About

·

Propose a topic

Loading...

Evidence: OSS-Fuzz now sends tested CodeMender patches with memory-safety bugs… | Reasoned

Topics
Contributors
About

·

Propose a topic

← AI is finding security bugs faster than maintainers can fix them. Should the 90-day disclosure deadline change?

OSS-Fuzz now sends tested CodeMender patches with memory-safety bugs in C/C++ projects; enrolled projects get them automatically unless they opt out.

Evidence·1 source·Cited by 1 point·Created Nov 7, 2026

Source

Google Security Blog: From finding to fixing, reducing maintainer burden with automated patches (July 29, 2026)
Published by blog.googleRecorded Nov 7, 2026
Open the original

What this evidence bears on

Supports: Platforms already do part of this: since July 2026 OSS-Fuzz attaches tested AI patches to memory-safety bugs it finds in C/C++ projects, and GitHub suggests fixes for code scanning alerts on public repositories for free.
- A reason for “Keep the deadline, and have platforms scan and patch by default”

Appears in topics

AI is finding security bugs faster than maintainers can fix them. Should the 90-day disclosure deadline change?

Reasoned.

The strongest case for each side of contested questions, with sources. Found a mistake? Tell us.

All topics Propose a topic Contributors World map About Guidelines Contact

© 2026 ReasonedEarly version: content and features are still changing.Legal notice Privacy Terms Cookies

·