Highlights
Sandbox Escape: 6 prior fixes. Scrutinize any change in this area.
codex-rs/core/src/unified_exec/process_manager.rs: most-fixed (2 issues). Treat as high-risk during review.
24 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Arbitrary File Access: 1 historical fix(es) link codex-rs/core/src/safety.rs to Arbitrary File Access.
Authorization Bypass: 1 historical fix(es) link codex-rs/network-proxy/src/authorization_path.rs, codex-rs/network-proxy/src/http_proxy.rs to Authorization Bypass.
Authorization Bypass: 1 historical fix(es) link codex-rs/core/src/unified_exec/process_manager.rs to Authorization Bypass.