Unverified50% confidenceEventExact time
Some people have used LLMs to analyze the curl source code and then mass-generate seemingly professional but actually nonexistent or unexploitable security vulnerability reports through bug bounty platforms such as HackerOne.
1
Sources
50%
Confidence
Long-term
Relevance
8/9/2026
First Seen
Sources
Rust官方规范AI代码贡献：LLM使用政策解读
Related Claims
UnverifiedLLM驱动的漏洞发现工具存在产生'幻觉漏洞'（看似合理但实际不存在的漏洞）的风险72% similarUnverified发现恶意依赖被安装并不能证明恶意代码真的运行过，命中查询工具应被视为深入调查的理由而非入侵结论71% similarUnverified恶意代码从未真正存在于仓库文件中，而是通过DNS查询从攻击者控制的服务器动态拉取攻击指令70% similarUnverified许多组织通过 HackerOne、Bugcrowd 等漏洞赏金平台建立正式的 VDP（漏洞披露政策）69% similarUnverified2006年被发现的OpenSSL整数溢出漏洞在代码库中潜伏多年，直到安全研究人员专项审计才曝光69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/713586API
curl https://kongchang.com/api/v1/knowledge/claims/713586MCP
get_claim(id=713586)