MathLive

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 31, 2026
Last mentioned3h ago

Timeline

2 articles · newest first

ChatGPT share-link chain let attackers run script in signed-in sessions

OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.

GBHackers10:58 UTC · 3h agoAI safety & security 3 sources1

ChatGPT share links executed JavaScript in signed-in sessions

Researchers read a private chat and sent it off-site; OpenAI fixed the P1 issue on October 26.

Hacker News · securityupdated 10:58 UTC · 3h agofirst Oct 31, 10:30 UTC · 2d agoVulnerability 3 sources HN 30 points · 20 comments2

Appears with

OpenAIvendor · 2
ChatGPTproduct · 2
Parameterorganization · 1
NetSupport RATmalware · 1

Entities are extracted by the model from each article. First seen Oct 31, 2026, last mentioned 3h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.