A malicious HEIF upload exploited Discourse, crossed OpenAI’s identity layer, and reached an internal GitHub repo through a connected Codex account.
First seen on esecurityplanet.com
Jump to article: www.esecurityplanet.com/news/news-openai-heif-github-vulnerability/
![]()

