Ask HN: Find Vulns with Claude in OSS?

With the phpshell vuln coming about last week, can the average techie find zero-day vulns in open source software?

Does anyone do this?