Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-xrxf-jgv3-qmrm
  • npm/@openai/codex
 OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files 14 Apr
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-w5fx-fh39-j5rw
  • npm/@openai/codex
 Codex has sandbox bypass due to bug in path configuration logic 19 Sep 2025
  • Fix available
  • Severity - 8.6 (High)