Search results

Credential home under a shared parent can be renamed aside before auth use

Status: Open.

#157 In openai/codex-security;

· batmnnn opened on Jul 30, 2026

Cost tracker keeps an unbounded partial JSONL event and repeatedly recopies it

Status: Open.

#138 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Preflight projection can discard the selected profile and active project trust entry

Status: Open.

#137 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

scans match --all builds unbounded quadratic history payloads

Status: Open.

#136 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Bulk-scan account selection only lists the first 100 GitHub organizations

Status: Open.

#135 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Malformed complete multiscan receipts permanently block campaign resume

Status: Open.

#133 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Configured plugin directory entry limit is applied after unbounded readdir

Status: Open.

#134 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Bulk-scan inventory loading has no input-size or repository-count limit

Status: Open.

#132 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

SDK close can hang indefinitely when a login child ignores SIGTERM

Status: Open.

#131 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Authentication and skill subprocess output can grow without bounds

Status: Open.

#130 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Bundled workbench resolves Git from inherited PATH instead of the trusted executable boundary

Status: Open.

#129 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Scan output under a shared parent can be replaced before completion

Status: Open.

#109 In openai/codex-security;

· batmnnn opened on Jul 29, 2026