This is a mirror of my article which Medium apparently refuses to show to some people.
As a lead of the Rust Secure Code Working Group, I got free access to GPT-5.5 via the Codex for Open Source. Since then I’ve found and reported dozens of issues of varying severity in widely used Rust crates.
Separately, the Rust Foundation security initiative got access to Mythos via Project Glasswing, and their report should also be coming soon. I’ve coordinated with them so that our audit targets would not overlap.
While I haven’t found any truly devastating vulnerabilities, I am very impressed with GPT-5.5 for aud