Hub/AI Security/Security disclosure page
Which AI tools have security disclosure page?
Public vulnerability disclosure channel or published advisories
7 Yes0 Partial
Verified Yes: Claude Code, Codex, Cursor, GitHub Copilot (VS Code), Windsurf / Devin Desktop, Zed, Cline.
| Tool | Status | Notes | Source |
|---|---|---|---|
| Claude CodeAnthropic | Yes | HackerOne program; 36 GHSAs published on anthropics/claude-code | Source |
| ClineCline | Yes | Advisories published on cline/cline | Source |
| CodexOpenAI | Yes | Advisories published on openai/codex | Source |
| CursorAnysphere | Yes | 33 GHSAs published on cursor/cursor | Source |
| GitHub Copilot (VS Code)GitHub / Microsoft | Yes | Advisories published on microsoft/vscode and github/github-mcp-server | Source |
| Windsurf / Devin DesktopCognition | Yes | Vulnerability disclosure via security@cognition.ai | Source |
| ZedZed Industries | Yes | 12 GHSAs published on zed-industries/zed | Source |
| ChatGPT (apps & connectors)OpenAI | Unknown | Not found in official docs checked 2026-11-04 | — |
| Claude apps (claude.ai / Desktop)Anthropic | Unknown | Not found in official docs checked 2026-11-04 | — |
| Gemini CLIGoogle | Unknown | No repo advisories; one GHSA exists in the global database | — |
| JetBrains AIJetBrains | Unknown | Not found in official docs checked 2026-11-04 | — |
| KiroAWS | Unknown | Not found in official docs checked 2026-11-04 | — |
Other AI Security features
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.