In a post on X, Cognition said the plugin helps secure systems against recent cybersecurity threats and can be installed with any agent or used directly in Devin today.
A companion post from the Devin AI account noted that Devin worked overnight to patch the vulnerabilities and shared the results.
21 and are already being exploited. The plugin scans all repositories for PHP or Node usage—including Dockerfiles, CI pipelines and Terraform configurations—lists findings for approval, upgrades to verified fixed versions and runs tests before and after the changes per repository.
Sources
Fan coverage from Devin Central — not an official Cognition announcement. Devin is a trademark of Cognition.