How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Zombie CVEs: Put to Rest by Humans, Dug Back Up by AI Agents

calendar_today July 26, 2026 person Eran Kinsbruner domain checkmarx

New research: 65–75% of frontier AI agents’ working patches resurrect vulnerabilities that were already found, fixed, and buried. In 2023, a path traversal vulnerability in Starlette, one of Python’s most popular web frameworks – was found, disclosed as CVE-2023-29159, and fixed. Case closed.

open_in_new Read original post