Open Internet by MindsNet

Unsecured Code Execution in OpenAI Codex

OpenAI Codex was vulnerable to command injection due to unsanitized branch names. This allowed for arbitrary code execution and exfiltration of GitHub OAuth tokens. The issue was patched, but existing usage may still be at risk.

Computing & Technology, Computer Science, Programming Languages