Oren Yomtov of Accomplish showed two ways out of the OpenAI Codex sandbox, one from read-only mode. OpenAI fixed both within eight days.
Imperva demonstrated code execution via crafted Brotli data on an official Node.js 24.22.0 Linux arm64 image; Node.js has ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Prompt injection test lab: build a 12-step Python harness that scores Claude, GPT, Gemini, Mistral and DeepSeek on 14 OWASP ...
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...