Unverified50% confidenceFactExact time
An OpenAI red-team test found an unauthenticated remote code execution vulnerability in the Brotli compression library, affecting software such as Node.js, Bun and Deno, and it has been reported and fixed.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/25/2026
First Seen
Valid until: 1/23/2027
Sources
Related Entities
Related Claims
UnverifiedResearchers gained access to OpenAI's internal code repositories by combining a heap overflow vulnerability with an SSO misconfiguration.69% similarUnverifiedThe Devin Vulnerability Fixes plugin can automatically scan for and fix remote code execution vulnerabilities in PHP, Node.js, and GitLab.67% similarUnverifiedThe Heartbleed vulnerability in OpenSSL and the Log4Shell vulnerability in Log4j exposed systemic issues of insufficient maintenance resources for critical open-source projects.66% similarUnverifiedVICE's security scanning covers high-risk issues such as keys leaked in bundled files, Supabase RLS misconfigurations, exposed API endpoints, weak HTTP headers, and infrastructure configurations.65% similarPartially VerifiedOpenCode experienced a security incident related to a large-scale distillation attack, affecting 1.4% of OpenCode Console users, mainly some accounts connected to external model providers.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1095777API
curl https://kongchang.com/api/v1/knowledge/claims/1095777MCP
get_claim(id=1095777)