Who contributed to OpenAI on August 20, 2026?

5 developers shipped this update, including Adam Perry @ OpenAI, copyberry, Hayden, Alex Chang, and openai-sdks[bot].

What were the notable OpenAI updates?

fix(security): authenticate Cloudflare tests and restrict streaming proxies (#2413), fix(security): bound SSE frames and NDJSON lines before buffering (#2411), and fix(security): harden Bedrock regions, query merges, and upload errors (#2410).

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

OPENAI-NODE SECURITY BLITZ PATCHES STREAMING EXPOSURES

By RepoJournal · Filed 06:58 UTC on August 20, 2026 · About OpenAI

5 people shipped this

Hayden @HAYDEN-OAI 5 cited

Adam Perry @ OpenAI @anp-oai 2 cited

Alex Chang @apcha-oai 2 cited

openai-sdks[bot] @openai-sdks[bot] 1 cited

copyberry @copyberry

Five security fixes landed in openai-node overnight, closing unauthenticated proxies, unbounded buffers, and path leaks that could have billed your account or leaked patient data.

OpenAI's Node SDK shipped a coordinated security sweep [1] [2] [3] [4] [5], headlined by a HIGH finding where the Cloudflare ecosystem worker "allowed unauthenticated requests to trigger billed operations and leave five persistent uploaded files" [1]. Streaming is the target: SSE frames and NDJSON lines are now capped at 8 MiB by default before buffering [2], and region injection is rejected before Bedrock builds endpoints or sends bearer tokens [3]. The Python SDK follows with 3.3.1, bumping dependencies with published security fixes and excluding affected Pydantic releases [8] [7], while migrating its build from the unmaintained Rye to uv [6]. On the codex side, CI enables unprivileged user namespaces across all Linux jobs [9], and SQLx warnings no longer feed back into SQLite logs, cleaning up diagnostics [10].

Action items

→ Upgrade openai-node to the latest release before your next deploy to close the streaming proxy and buffer vulnerabilities openai/openai-node [immediate]
→ Update openai-python to 3.3.1 to pick up security-fixed dependencies and the uv build migration openai/openai-python [immediate]
→ Review your Cloudflare worker setup to ensure no unauthenticated billed operations remain exposed openai/openai-node [immediate]
→ Monitor codex CI changes; user namespaces are enabled globally, so watch for any AppArmor-related regressions openai/codex [monitor]

References

[1] fix(security): authenticate Cloudflare tests and restrict streaming proxies (#2413) openai/openai-node
[2] fix(security): bound SSE frames and NDJSON lines before buffering (#2411) openai/openai-node
[3] fix(security): harden Bedrock regions, query merges, and upload errors (#2410) openai/openai-node
[4] fix(security): redact malformed Realtime WebSocket error causes (#2408) openai/openai-node
[5] fix(security): prevent streaming upload filename path disclosure (#2386) openai/openai-node
[6] chore(build): migrate to uv (#3653) openai/openai-python
[7] fix(deps): update dependencies with published security fixes (#3680) openai/openai-python
[8] release: 3.3.1 (#3658) openai/openai-python
[9] Enable user namespaces in shared CI setup (#39606) openai/codex
[10] Prevent SQLx warnings from feeding back into SQLite logs (#39592) openai/codex

Quick answers

What shipped in OpenAI on August 20, 2026?: Five security fixes landed in openai-node overnight, closing unauthenticated proxies, unbounded buffers, and path leaks that could have billed your account or leaked patient data. In total, 76 commits, 76 pull requests, and 3 releases landed.
Who contributed to OpenAI on August 20, 2026?: 5 developers shipped this update, including Adam Perry @ OpenAI, copyberry, Hayden, Alex Chang, and openai-sdks[bot].
What were the notable OpenAI updates?: fix(security): authenticate Cloudflare tests and restrict streaming proxies (#2413), fix(security): bound SSE frames and NDJSON lines before buffering (#2411), and fix(security): harden Bedrock regions, query merges, and upload errors (#2410).

OPENAI NODE SHIPS FOUR SECURITY FIXES, STREAMING SAFETY AND CREDENTIAL LEAKS PATCHED

If you run the official OpenAI Node SDK, today's security patch train is the one you can't skip.

ai 167 shipped

OpenAI Aug 19

OPENAI SHIPS SECURITY BLITZ ACROSS SDKs

Overnight, OpenAI hardened its entire client stack, patching WebSocket origin bypasses and credential leaks in node, Python, and Codex sandboxes alike.

ai 162 shipped

OpenAI Aug 18

OpenAI SDKs ship Bedrock Runtime and credential injection fixes

OpenAI's Node and Python SDKs both land Bedrock Runtime support alongside critical security patches that block credential disclosure.

ai 142 shipped

OpenAI Aug 16

CODEX HARDENS SESSION STATE, NODE SDK TIGHTENS ZOD VALIDATION

Codex shipped five fixes to prevent stale app state from bleeding into active sessions, while the Node SDK now rejects malformed Zod v3 schemas before they reach the API.

ai 39 shipped

Elsewhere on the wire

AI Agents Aug 21

CLINE V4.1.11 SHIPS IMAGE GENERATION AND AGENT-UI FIXES

Cline's latest release lets models generate images mid-task, while LlamaIndex quietly breaks frontend tool handlers.

ai-agents 78 shipped

Local LLMs Aug 21

DeepSeek V4 fuses shared experts, as vLLM ships a security guard

The biggest local-LLM repos are moving fast: DeepSeek V4's MoE kernel gets a massive fusion, while vLLM patches a security hole.

+12

llms 274 shipped

@CachyOS Aug 21

CachyOS Scheduler Hotfixes and Kernel Upgrades Lead the Day

A hotfix for the scx_cake scheduler and the latest Linux 7.2 kernel are rolling out across CachyOS repos.

infra 66 shipped

Elixir & Phoenix Aug 21

Phoenix 1.8.12 patches channel message drop

Phoenix shipped a patch release that fixes a channel bug silently dropping messages without a join_ref, and LiveView is quietly rewriting the rules of navigation.