Flaws uncovered in proprietary and open-source initiatives
In its first testing cycle, OpenAI mentioned Codex Safety scanned greater than 1.2 million commits throughout exterior repositories, figuring out 792 essential vulnerabilities and 10,561 excessive severity points. The corporate mentioned the findings got here from a variety of real-world codebases whereas sustaining comparatively low noise, as essential points appeared in below 0.1% of scanned commits.
“Netgear was happy to affix the early entry program, and the outcomes exceeded expectations,” Chandan Nandakumaraiah, head of product security at Netgear, mentioned in a remark shared inside the publish. “Codex Safety built-in effortlessly into our sturdy security improvement surroundings, strengthening the tempo and depth of our evaluate processes.”
Past proprietary repositories, vulnerabilities had been flagged in a number of broadly used open-source initiatives too, together with OpenSSH, GnuTLS, GOGS, Thorium, libssh, PHP, and Chromium, with 14 CVEs assigned up to now.
