A semicolon in a Codex branch name leaked its GitHub token. Scope decided the damage
A branch name with a semicolon in it was enough to pull a GitHub OAuth token out of OpenAI's Codex, according to a DevOps.com write-up of a critical…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route A patch released in June 2026 became an urgent remediation item in Septe…
CVE-2026-42271: How a Popular AI Gateway Became an RCE Vector — And What to Audit in Your Stack
The Vulnerability On May 8, 2026, BerriAI disclosed CVE-2026-42271 , a command-injection flaw in LiteLLM — one of the most widely deployed open-sour…