Who contributed to OpenAI on August 19, 2026?

7 developers shipped this update, including olliem-oai, iceweasel-oai, felixxia-oai, github-actions[bot], Hayden, openai-sdks[bot], and apcha-oai.

What were the notable OpenAI updates?

fix(security): harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414), fix(security): authenticate Vercel ecosystem APIs and clean up uploaded files (#2412), and v3.3.0.

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

OPENAI SHIPS SECURITY BLITZ ACROSS SDKs

By RepoJournal · Filed 06:58 UTC on August 19, 2026 · About OpenAI

7 people shipped this

Hayden @HAYDEN-OAI 4 cited

olliem-oai @olliem-oai 1 cited

iceweasel-oai @iceweasel-oai 1 cited

github-actions[bot] @github-actions[bot] 1 cited

openai-sdks[bot] @openai-sdks[bot] 1 cited

apcha-oai @apcha-oai 1 cited

felixxia-oai @felixxia-oai

Overnight, OpenAI hardened its entire client stack, patching WebSocket origin bypasses and credential leaks in node, Python, and Codex sandboxes alike.

A coordinated security sweep landed across the OpenAI ecosystem this morning, led by a run of fixes in the Node SDK. A high-severity advisory removes the beta Realtime constructor's public `__url` override and validates the WebSocket destination against the configured client origin [1]. The same repo also locks down Vercel ecosystem APIs, closing an unauthenticated assistant listing that exposed account data [2]. The Python SDK ships 3.3.0, which requires patched versions of aiohttp and urllib3 to quash two supply-chain advisories: 'Support named data-residency endpoints' is the marquee feature, but the dependency floor is the real headline [3][4]. On the Codex side, Guardian v2 risk classification gets a more aggressive default prompt that triggers full review at a 0.5 `action_risk` score, down from 0.8 [5]. A Windows sandbox ACL failure could previously report success while leaving world-writable paths unguarded; now preflight fails hard after aggregating every deny-ACE error [6]. The security posture extends to CI: both node and Python repos now run CodeQL on merge queues, failing closed on any finding [7][8]. The release train also brings Codex 0.148.0, which adds `/export` for TUI conversations to Markdown and a `codex exec fork` command [9].

Action items

→ Upgrade openai-node to the latest patch and audit any Realtime WebSocket usage for origin validation openai/openai-node [immediate]
→ Upgrade openai-python to v3.3.0 and verify aiohttp and urllib3 meet the new minimums openai/openai-python [immediate]
→ Update Codex to 0.148.0 and review any Windows sandbox configurations for the ACL fix openai/codex [plan]
→ Add CodeQL to your own CI if you mirror these SDK patterns openai/openai-node [plan]

References

[1] fix(security): harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414) openai/openai-node
[2] fix(security): authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) openai/openai-node
[3] v3.3.0 ↗ openai/openai-python
[4] fix: require patched optional networking dependencies ↗ openai/openai-python
[5] Improve Guardian v2 risk classification (#39264) openai/codex
[6] Propagate Windows sandbox ACL update failures (#39279) openai/codex
[7] ci(security): run CodeQL for pull requests and merge groups (#2388) openai/openai-node
[8] ci: run CodeQL analysis for merge-queue entries (#3643) openai/openai-python
[9] 0.148.0 ↗ openai/codex

Quick answers

What shipped in OpenAI on August 19, 2026?: Overnight, OpenAI hardened its entire client stack, patching WebSocket origin bypasses and credential leaks in node, Python, and Codex sandboxes alike. In total, 79 commits, 78 pull requests, and 5 releases landed.
Who contributed to OpenAI on August 19, 2026?: 7 developers shipped this update, including olliem-oai, iceweasel-oai, felixxia-oai, github-actions[bot], Hayden, openai-sdks[bot], and apcha-oai.
What were the notable OpenAI updates?: fix(security): harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414), fix(security): authenticate Vercel ecosystem APIs and clean up uploaded files (#2412), and v3.3.0.

OPENAI-NODE SECURITY BLITZ PATCHES STREAMING EXPOSURES

Five security fixes landed in openai-node overnight, closing unauthenticated proxies, unbounded buffers, and path leaks that could have billed your account or leaked patient data.

ai 155 shipped

OpenAI Aug 18

OpenAI SDKs ship Bedrock Runtime and credential injection fixes

OpenAI's Node and Python SDKs both land Bedrock Runtime support alongside critical security patches that block credential disclosure.

ai 142 shipped

OpenAI Aug 16

CODEX HARDENS SESSION STATE, NODE SDK TIGHTENS ZOD VALIDATION

Codex shipped five fixes to prevent stale app state from bleeding into active sessions, while the Node SDK now rejects malformed Zod v3 schemas before they reach the API.

ai 39 shipped

OpenAI Aug 15

OPENAI NODE HARDENS AGAINST CREDENTIAL LEAKS AND REMOTE CRASHES

Hayden shipped five security fixes across Realtime, streaming, and Bedrock clients, closing credential-exposure paths and preventing malformed server payloads from crashing applications.

ai 181 shipped

Elsewhere on the wire

AI Agents Aug 20

LangChain ships core 1.6.0 with a security warning tucked inside

LangChain's newest core release fixes a tool-injection bug, but the fix itself widens the path for arbitrary code execution.

ai-agents 95 shipped

Local LLMs Aug 20

OLLAMA FIXES DEADLOCK THAT HUNG CHAT AND GENERATE

A mid-stream parser error in Ollama's server silently wedged chat and generate requests, leaking goroutines and hanging retries until a fix landed overnight.

+14

llms 268 shipped

@CachyOS Aug 20

LINUX-CACHYOS SHIPS 7.2.0-1

CachyOS's custom kernel just advanced to 7.2.0-1, and the sched-ext toolchain is moving in lockstep.

infra 55 shipped

Elixir & Phoenix Aug 20

LIVE VIEW HOOKS GET THE ELOQUENT TREATMENT

Phoenix Live View is shipping a passel of hook and JS-client fixes today, headlined by new beforeUpdate arguments that hand you more control over a hook's lifespan.