CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

AZL-57407 CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57443 CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-5

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...