opencode-ai

2 known vulnerabilities · 0 critical · 0 high

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

Published Jan 13, 2026

Malicious website can execute commands on the local system through XSS in the OpenCode web UI

Published Jan 13, 2026

Check your entire dependency tree at onceRun dependency scan →