Patch the Planet Identifies Hundreds of Open-Source Bugs in First Week

Patch the Planet identified hundreds of vulnerabilities while working to move open-source software issues from discovery to completed fixes.

OpenAI and Trail of Bits launched the initiative under OpenAI’s Daybreak cybersecurity program on June 22, 2026. Patch the Planet combines OpenAI models with Trail of Bits security engineers, researchers and open-source maintainers to identify vulnerabilities, develop patches and coordinate disclosures.

The first week produced hundreds of discovered bugs, 64 pull requests and 51 filed issues across 19 open-source projects. Thirty-seven patches had been merged by the time of the announcement.

The initiative covers software used across technology and crypto infrastructure, including cURL, Go, Python, Sigstore and pyca/cryptography. More than 30 open-source projects had committed to participate, compared with 19 projects covered during the initial work.

“Thanks to our partnership with OpenAI and its Daybreak initiative, we can report that the impact is hundreds of discovered bugs, 64 pull requests, and 51 issues filed across 19 projects,” Trail of Bits said.

Trail of Bits is a founding partner of Patch the Planet alongside HackerOne, Calif, researchers and open-source maintainers. The initiative is designed to pair automated vulnerability discovery with human review, testing, patch development and coordinated disclosure.

“Patch the Planet is an initiative founded with Trail of Bits in collaboration with HackerOne, Calif, researchers, and maintainers to help widely used open-source projects move from findings to fixes,” OpenAI said.

The work focuses on validating vulnerability findings, creating patches and coordinating their release. “The advantage is no longer in finding bugs, but everything after,” the company said.

The official Patch the Planet announcements disclosed no transaction value, acquisition structure, timetable or ownership change. The next stated phase of the initiative is continued review and deployment of fixes across participating open-source projects.