Finding a vulnerability is one step. Getting a good fix into the software people depend on is where the work really counts.
Hereโs a glimpse of ๐ข๐๐ฆ๐๐ฆ โ ๐ข๐ฝ๐ฒ๐ป ๐๐๐๐ผ๐บ๐ฎ๐๐ฒ๐ฑ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐๐ป๐ถ๐๐ถ๐ฎ๐๐ถ๐๐ฒ ๐ณ๐ผ๐ฟ ๐ฆ๐ผ๐ณ๐๐๐ฎ๐ฟ๐ฒ, an OWASP project bringing AppSec expertise and AI-assisted fix generation together to help secure open source.
The approach is practical: automated tools generate candidate fixes, security practitioners review whether the vulnerability is real and the proposed fix is sound, and validated contributions move upstream for maintainers to consider. Maintainers retain control over what gets merged.
What I appreciate about this is the space it creates for meaningful community contribution. Reviewing a patch, questioning an assumption, or spotting a fix that introduces another problem can make a difference far beyond our own organisations.
For me, this is one of the most valuable ways to apply security expertise: helping improve the software we all rely on.
๐ฅ Watch the glimpse: https://www.youtube.com/watch?v=6Lg9EYrV-_k&t=3s ๐ Explore the project and ways to contribute: https://www.owasp-oasis.org/
What would help you take that first step from using open source to contributing to its security? Michael Cartsonis Chris Holt
#OWASP #OASIS #OpenSourceSecurity #AppSec #Cybersecurity #SecurityCommunity