Next.js ImageResponse flaw can lead to server code execution when attacker-controlled values reach generated SVG.
Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.