All issues

Search results

TypeScript contract loader accepts reversed finding line ranges

Status: Open.

#560 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Deferred coverage paths bypass canonical repository-relative validation

Status: Open.

#557 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Saved scan logs include same-thread events emitted after scan completion

Status: Open.

#555 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Failed or inconsistent config-preflight commands can report worker capacity

Status: Open.

#553 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Interactive login metadata accepts external plaintext HTTP URLs

Status: Open.

#550 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Path-target preflight accepts special files that scan setup later rejects

Status: Open.

#548 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Repository index cannot return unscanned targets

Status: Open.

#546 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Windows activity paths are dropped when repository casing differs

Status: Open.

#544 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Canonical code-evidence paths bypass repository-relative path validation

Status: Open.

#541 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

Bulk-scan wizard drops cancellation while waiting on interactive prompts

Status: Open.

#539 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026

CLI: failed structured history commands emit an ok: true envelope

Status: Open.

#538 In openai/codex-security;

· soyeon-oai opened on Aug 18, 2026

Update notices use locale collation instead of SemVer prerelease ordering

Status: Open.

#534 In openai/codex-security;

· sylvesterkaczmarek opened on Aug 18, 2026