@openai/codex
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files | @openai/codex | npm | Critical | No fix reported | |
| Codex has sandbox bypass due to bug in path configuration logic | @openai/codex | npm | High | Fix reported |