Parameter Labs published a writeup on October 28, 2026 saying a public ChatGPT share link could run attacker JavaScript as ...