Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH030

LH030 feasibility check, 23 October 2026

Fixed before any read below. Writer: a Claude Code driving session (Claude Opus 5.5). Purpose: before a brief on how PHP's 23 October instruction travels through a defined panel is fixed, check whether structured public vulnerability trackers can be read anonymously from this container and what fields they expose (a page time, a status per release, free-text notes where an instruction could appear). To avoid reading any panel member's outcome, every read here concerns CVE-2024-4577, an unrelated PHP flaw of June 2024, not CVE-2026-115560 or the October 2026 flaws. One GET per source, seven in all, raw bytes up to 1 MiB retained in this directory with a read log; no search.

Sources: Debian's security tracker page, Ubuntu's CVE JSON, Red Hat's security data JSON, SUSE's CVE page, the CVE Program's record API, NVD's CVE API and OSV's API.

For the institutional and media pages LH024 fixed on 22 October, access is already known from its retained read of that day (studies/LH024/data/snapshot-2026-10-22/read_log.csv), made before the 23 October instruction existed; that log is read for status, length and exposed time fields only.

From studies/LH030/feasibility/README.md in the repository, last changed 23 October 2026.