openai/codex

Escaneado em 11 de jun. de 2026

Risk score/ 100

Risco alto

Resumo

Critical quantum vulnerabilities detected across 4 locations in production code. SHA-1 is cryptographically broken and used in analytics modules for hashing operations, posing immediate integrity risks. X25519 elliptic curve cryptography in agent identity management is vulnerable to quantum attacks via Shor's algorithm, threatening future confidentiality.

Crítico

Alto

Médio

Baixo

Principais findings

CríticoSHA-1
codex-rs/analytics/src/accepted_lines.rs:7
SHA-256 or SHA3-256
Evidência
```
use sha1::Digest;
```
CríticoSHA-1
codex-rs/analytics/src/accepted_lines.rs:86
SHA-256 or SHA3-256
Evidência
```
let mut hasher = sha1::Sha1::new();
```
CríticoSHA-1
codex-rs/analytics/src/reducer.rs:131
SHA-256 or SHA3-256
Evidência
```
use sha1::Digest;
```
AltoX25519 / Curve25519
codex-rs/agent-identity/src/lib.rs:13
ML-KEM (CRYSTALS-Kyber)
Evidência
```
use crypto_box::SecretKey as Curve25519SecretKey;
```

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis