CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

CVE-2026-19591: Improper Neutralization of Escape, Meta, or Control Sequences

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

AZL-57443 CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-5

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57407 CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...