OpenAI Codex Security finds Brotli bug; agent patches 104 containers in 1h 8m
fekdaoui · x · 2026-10-24
OpenAI's Codex Security discovered a bug in Brotli, the compression library built into Node.js and Bun — a server accepting compressed data can be taken over.
Fixed versions:
- Node.js 22.23.4, 24.22.1, 26.12.1
- Bun 1.4.4
Poster fekdaoui then told the agent "you found it, you fix it": the agent worked 1h 8m, patched and verified 104 running Node containers and 4 Trigger workers, and updated source across 21 repositories. Two paused Vercel projects couldn't be rebuilt and one repo needs access for the source update. All deployed apps should update, rebuild, and redeploy promptly.
More from coding & agent
- AXL launches remote MCP server exposing 1,284 sales and marketing APIs to Claude and Codex — EdTech_Padre · 2026-10-27
- Every's 'frontier team' tracks new models and audits AI spend per person and task — every · 2026-10-27
- How the Claude Code Team Reviews Code When Claude Writes 90% of It — inductionheads · 2026-10-27
- OmarchyTV hits GitHub: Omarchy-style TV launcher with AI TUI and MCP — alexcovo_eth · 2026-10-27
- AWS on agent prompt caching: explicit + implicit patterns to slash token costs — AWS ML Blog · 2026-10-27
- Reddit Thread: Keeping AI Agents Grounded in Current Project Information — Few-Ad-1358 · 2026-10-27