OpenAI vulnerability affects Slack, Meta, GitHub Enterprise
This matters because the vulnerability affects widely used tools like Slack and GitHub Enterprise, which many readers may use.
After disclosing a vulnerability in OpenAI's image parser, researchers found it also impacted Slack, Meta, GitHub Enterprise, Rails, Next.
js, and ImageMagick.The flaw was in the libheif library used by many applications.
13/ 在完成 OpenAI 的漏洞披露后，他们继续检查其他使用相同图像解析器的产品。 结果发现，这个漏洞还影响 Slack、Meta、GitHub Enterprise、Rails、Next.js、ImageMagick 等大量应用。 x.com/rootxharsh/sta… Harsh Jaiswal @rootxharsh We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more. It was literally xkcd #234 , one obscure image library beneath a huge number of apps. 🧵 🔗 View Quoted Tweet📊 1 ⚡
This report is categorized under AITOP's "Products" desk, focusing on US frontier AI labs and Silicon Valley technology leaders. Within our cross-regional analytical framework, it directly maps to AI regulation, compliance frameworks, and sovereign compute policy and AI developer toolchains, coding agents, and engineering workflows. Key entities and technical topics under continuous tracking include OpenAI, Slack, GitHub Enterprise, vulnerability.
Source attribution: curated from AI Will (@FinanceYF5). Cross-source corroboration: 11 independent sources have covered this development (including IT之家, 小互, Tech in Asia), confirming industry-wide signal strength.
