Parameter Labs
1 story · first 1 Nov · latest 1 Nov
Facts we checked
Each fact was checked against the page it links to.
-
Parameter Labs says the code could call ChatGPT's authenticated APIs as the victim, and that OpenAI has fixed the issue.
We found a gap at OpenAI · Parameter Labs · archived copy · checked 1 Nov 2026 · Cite this fact · the story
-
Parameter Labs says its researchers found a way to run attacker-controlled JavaScript as chatgpt.com in a victim's signed-in session, where the victim only had to open a public ChatGPT share link.
We found a gap at OpenAI · Parameter Labs · archived copy · checked 1 Nov 2026 · Cite this fact · the story
The story
Built from our published stories and the facts we checked, and kept up to date by them. How we correct.