OpenAI published an account of coordinated work with PHP maintainers, researchers and security providers to address critical vulnerabilities. The company says Calif identified a flaw using GPT-5.6 Sol through Patch the Planet, while Wiz independently discovered and reported both vulnerabilities discussed in the announcement. PHP maintainers led the fixes and release. OpenAI also proposed a disclosure framework covering upstream validation, advance preparation, coordination and deployment guidance. The framework is a proposal seeking community feedback, rather than an established industry standard.
Source: OpenAI — https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/ Original publication date: 2026-10-21. The source date is stored at 00:00 UTC as a calendar-date representation, not as a verified release time. Summary based on the official announcement; checked on 23 October 2026.