Hacktron's OpenAI bounty: Discourse RCE met an SSO bridge
A July chain on community.openai.com reached ChatGPT and Codex. OpenAI paid $6,500 for the identity finding. Discourse's HEIF advisory tells self-hosters to rebuild.
Read the piecePublished Frontier reporting tagged “bounty”.
2 articles · Full archive · Topics
2 recent pieces
A July chain on community.openai.com reached ChatGPT and Codex. OpenAI paid $6,500 for the identity finding. Discourse's HEIF advisory tells self-hosters to rebuild.
Read the pieceNew releases, then the constraint.