HIGHnpm
GHSA-w5fx-fh39-j5rw· CVE-2025-59532Codex has sandbox bypass due to bug in path configuration logic
Modified: 9/22/2025
package
npm/@openai/codex
pkg:npm/%40openai/codex
CRITICAL9.8npm
GHSA-xrxf-jgv3-qmrm· CVE-2025-61260OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
Modified: 4/16/2026