CompanyNoma
Noma Labs
A vulnerability research team focused on the security of AI applications, known for disclosing security vulnerabilities in AI coding tools.
Timeline (last 90 days)
Oct 18
The vulnerability was reported by Noma Labs on July 4, and Anthropic rated it a CVSS score of 8.7 (high severity).
Unverified50%
Oct 18
Anthropic's first patch blocked fetch() and XMLHttpRequest calls to file:// within the page, but Noma successfully bypassed it by moving fetch() into a Web Worker created from a blob: URL.
Unverified50%
All Facts (2)
Unverified
The vulnerability was reported by Noma Labs on July 4, and Anthropic rated it a CVSS score of 8.7 (high severity).
50%UnverifiedAnthropic's first patch blocked fetch() and XMLHttpRequest calls to file:// within the page, but Noma successfully bypassed it by moving fetch() into a Web Worker created from a blob: URL.
50%