Security: anomalyco/opencode
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Malicious website can execute commands on the local system through XSS in the OpenCode web UIGHSA-c83v-7274-4vgp published
Jan 12, 2026 by thdxrCritical -
Unauthenticated HTTP Server Allows Arbitrary Command ExecutionGHSA-vxw4-wv6m-9hhh published
Jan 12, 2026 by thdxrHigh