Expired85% confidenceFactTime unknown
By default, the Codex plugin's adversarial review only scanned the file responsible for user login in the project, completely ignoring SQL injection, SSRF, and other risks in other folders within the same repository.
1
Sources
85%
Confidence
Medium-term (~90 days)
Relevance
6/1/2026
First Seen
Valid until: 8/30/2026(expired)
Sources
Related Entities
Related Claims
UnverifiedCodex Computer Use poses three major security risks: visible screen content being uploaded and read, misoperation of already-logged-in accounts, and leakage of sensitive information during transmission.66% similarUnverifiedClaude Code's /security review command covers vulnerability checks for SQL injection, XSS, key leakage, and privilege escalation.66% similarUnverifiedCodex Security处于Limited Beta状态，仅对经过审批的客户和合作伙伴开放，扫描能力绑定OpenAI云和模型，部分全库扫描还需要Trusted Access for Cyber额外授权65% similarUnverified现有文档安全扫描工具主要检查宏代码、嵌入对象和外部链接等已知威胁向量，几乎没有工具会审查空格字符的渐变色标点参数是否携带编码数据65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/19359API
curl https://kongchang.com/api/v1/knowledge/claims/19359MCP
get_claim(id=19359)