OpenAI found a critical flaw in Brotli (used by Node.js, Bun and Envoy)
twitter.com
twitter.com
Nitter link: https://nitter.jaydenha.uk/OpenAI/status/2113766354386084338
And the bug was fixed in February, so AI didn't find the bug, just found that the bugfix hadn't been applied in the wild.