A CVSS 10.0 Landed Over the Weekend — Cognition Open-Sources Devin's Vulnerability-Fixing Skill for Free, and Made It Run on Claude Code and Cursor Too
Right after a run of critical RCEs in PHP, Node, and GitLab, Cognition open-sourced Devin's "vulnerability-fixing Skill" for free. It runs on 70+ agents including Claude Code and Cursor, proceeding through read-only scan → approval → one PR. But it also comes with a warning against taking the agent'