Tracking Anthropic‑Discovered Vulnerabilities

By Naveen Malothu – AI Infrastructure Engineer, DevOps Architect, Founder @ Griffin AI Tech

1️⃣ What was released / announced

Anthropic just published an open‑source vulnerability feed called Glasswing (November 2024 update). The feed aggregates all CVEs, bug‑bounty disclosures, and internal security findings that affect Anthropic’s LLM stack – from model‑serving containers to the custom Rust‑based inference runtime. It’s delivered as a JSON‑lines endpoint ( https://glasswing.anthropic.com/v1/feed ) and also as a GitHub repository that ships a daily CSV snapshot.

2️⃣ Why it matters

If you’re building or operating LLM‑powered services, you’re already dealing with a massive attack surface:

Model containers (Docker, OCI) that run on shared GPU nodes.

Inference runtimes written in low‑level languages (Rust, C++) for latency.

Prompt‑engineering pipelines that ingest user data and may inadvertently expose secrets.

Anthropic’s feed is the first…