Patch Node.js, Bun and Envoy: OpenAI's red team found a Brotli RCEUnauthenticated remote code execution in the Brotli decoder (CVE-2026-111497). Fixed versions are out. Plus Codex cache behavior and a dots triage demo.OpenAISat 24 Oct 2026