opencode-ai
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution | opencode-ai | npm | High | Fix reported | |
| Malicious website can execute commands on the local system through XSS in the OpenCode web UI | opencode-ai | npm | Critical | Fix reported |