Post

Here's a chronic AI-security-report fail: reporting vulns against obsolete patch versions. Not that humans don't do this too, but humans using AI tools do it constantly. Part of it is AI models' inability to parse or understand patch versions; remember that LLMs are bad with numbers ...

... so an agent will report a vuln against 3.5.16, when 3.6.16 is the current version and 3.5.16 has 9 patches against it since it was released. The AI just can't tell the difference between the two version numbers.

0 reposts0 likes

No replies yet.