Skip to content
OpenAdvisories

Package · npm

paperclipai

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    GHSA-gqqj-85qm-8qhf

    Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email

    ### Summary A Paperclip-managed `codex_local` runtime was able to access and use a Gmail connector that I had connected in the ChatGPT/OpenAI apps UI, even though I had not explicitly connected Gmail inside Paperclip or separately inside Codex. In my environm…

    paperclipai npm