Who contributed to OpenAI on August 14, 2026?

5 developers shipped this update, including copyberry, Matthew Zeng, Hayden, Alex Chang, and jbeckwith-oai.

What were the notable OpenAI updates?

fix(security): prevent process-wide prototype pollution via assistant stream snapshot IDs (#2316), fix(auth): reject redirects during workload identity token exchange (#2321), and fix(azure): prevent API-key disclosure across HTTP redirects (#2320).

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

OPENAI-NODE SHIPS FOUR SECURITY FIXES OVERNIGHT

By RepoJournal · Filed 06:58 UTC on August 14, 2026 · About OpenAI

5 people shipped this

Hayden @HAYDEN-OAI 5 cited

copyberry @copyberry 4 cited

Alex Chang @apcha-oai 1 cited

jbeckwith-oai @jbeckwith-oai 1 cited

Matthew Zeng @mzeng-openai

Four high-severity vulnerabilities closed in the JavaScript SDK, including prototype pollution, API-key disclosure across redirects, and multipart upload header injection.

The openai-node team patched a remotely triggerable process-wide prototype pollution flaw in assistant streaming that could pollute `Object.prototype` via malicious run-step delta IDs [1], alongside three additional security fixes: rejecting HTTP redirects during workload identity token exchange to block credential theft [2], preventing Azure API-key disclosure across cross-origin redirects [3], and blocking ASCII control characters in multipart upload MIME types to stop header injection [4]. A fifth fix removes vulnerable extract-zip from browser test fixtures by upgrading Puppeteer to 25.5.0 [5]. On the Python SDK side, stream IDs now route WebSocket events FIFO for better ordering guarantees [6], while Sora video APIs are deprecated ahead of September shutdown [7]. In Codex, Guardian V2 risk assessment now receives full tool action context and conversation history instead of just tool names [8], thread revert operations preserve pagination cursors and mutable settings [9], approval policies survive auto-review model selection [10], and MCP HTTP requests fall back to rustls on TLS negotiation failures [11]. Across three repos: 68 commits, 68 PRs, 3 releases this period.

Action items

→ Upgrade openai-node immediately for prototype pollution and credential disclosure fixes openai/openai-node [immediate]
→ Pin openai-python and migrate off Sora video APIs before September openai/openai-python [plan]
→ Test Codex Guardian V2 context exposure in staging openai/codex [plan]

References

[1] fix(security): prevent process-wide prototype pollution via assistant stream snapshot IDs (#2316) openai/openai-node
[2] fix(auth): reject redirects during workload identity token exchange (#2321) openai/openai-node
[3] fix(azure): prevent API-key disclosure across HTTP redirects (#2320) openai/openai-node
[4] fix(security): prevent multipart upload content-type header injection (#2322) openai/openai-node
[5] fix: remove vulnerable extract-zip from browser tests (#2312) openai/openai-node
[6] feat(api): add WebSocket stream IDs (#3612) openai/openai-python
[7] feat(api): deprecate Sora video APIs (#3610) openai/openai-python
[8] Give Guardian V2 full tool action context ↗ openai/codex
[9] Add app-server support for reverting paginated threads ↗ openai/codex
[10] Preserve approval policies for auto-reviewed models ↗ openai/codex
[11] Add rustls fallback for local MCP HTTP requests ↗ openai/codex

Quick answers

What shipped in OpenAI on August 14, 2026?: Four high-severity vulnerabilities closed in the JavaScript SDK, including prototype pollution, API-key disclosure across redirects, and multipart upload header injection. In total, 68 commits, 68 pull requests, and 3 releases landed.
Who contributed to OpenAI on August 14, 2026?: 5 developers shipped this update, including copyberry, Matthew Zeng, Hayden, Alex Chang, and jbeckwith-oai.
What were the notable OpenAI updates?: fix(security): prevent process-wide prototype pollution via assistant stream snapshot IDs (#2316), fix(auth): reject redirects during workload identity token exchange (#2321), and fix(azure): prevent API-key disclosure across HTTP redirects (#2320).

OPENAI NODE HARDENS AGAINST CREDENTIAL LEAKS AND REMOTE CRASHES

Hayden shipped five security fixes across Realtime, streaming, and Bedrock clients, closing credential-exposure paths and preventing malformed server payloads from crashing applications.

ai 181 shipped

OpenAI Aug 13

CODEX HARDENS PLUGIN METRICS AND SESSION RESILIENCE WHILE NODE SDK FIXES STREAMING ERRORS

Codex shipped resilience upgrades for gRPC reconnection and multi-review rejection reporting, while the Node SDK patches a critical streaming bug that could mask failed requests as successes.

ai 112 shipped

OpenAI Aug 12

PYTHON SDK GOES HTTPX2, NODE PATCHES PROTOTYPE POLLUTION, CODEX HARDENS STREAMING

OpenAI Python SDK v3.0.0 ships HTTPX2 as the default HTTP client, breaking the old httpx dependency entirely while Node.js closes a critical prototype-pollution vulnerability in assistant streams.

ai 196 shipped

OpenAI Aug 11

CODEX TIGHTENS MEMORY WITH MOVE-ONLY SUBMISSIONS AS NODE SDK COMPLETES LINTING OVERHAUL

Codex eliminated cloning overhead from submission operations while the Node SDK wrapped up a 185-part linting cleanup that touches every rule in the compatibility matrix.

ai 186 shipped

Elsewhere on the wire

AI Agents Aug 15

LANGCHAIN SHIPS ENCRYPTED REASONING FIX, CLINE ADDS WEB SEARCH AND VOICE

ChatOpenAI now preserves OpenAI's encrypted reasoning from streamed responses, while Cline releases three versions with provider-executed web search and microphone transcription.

ai-agents 55 shipped

Local LLMs Aug 15

QWEN3.8 LANDS IN OLLAMA WITH DEVELOPER INSTRUCTION SUPPORT

Ollama shipped full Qwen3.8 support overnight, adding reasoning-effort semantics and a critical fix for coding agents that send developer instructions before user messages.

+12

llms 208 shipped

@CachyOS Aug 15

FIRMWARE AND INIT SYNC LANDS AS AUTOS ROLL FORWARD

CachyOS synced linux-firmware with Arch and bumped mkinitcpio to 41.1-1, while the package automation pipeline keeps qview and qtscrcpy current across the AUR-derived repo.

infra 41 shipped

Elixir & Phoenix Aug 15

PHOENIX LIVE VIEW SHIPS UPLOAD OVERHAUL, ELIXIR TUNES CORE PERFORMANCE

SteffenDE landed five critical fixes for LiveView's upload handler in one sweep, while the Elixir core team optimized Version comparison and regex operations.