← All credits

maitai (@MaitaiThe) of Doyensec (@Doyensec), reporting through the Zero Day Initiative.

1 vulnerability record and advisories credit this contributor.

CVE-2026-19592
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository w