Login Request a demo
OP
Product
opencode
by anomalyco · last CVE Oct 29, 2026
3
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add opencode to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-22812
8.8
17%
Jan 12
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
Affected: < 1.0.216
CVE-2026-119025
New
7.5–Oct 29
open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
Affected: 1.0.137 before 1.18.33
CVE-2026-22813
6.1
1%
Jan 12
Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Affected: < 1.1.10
Showing 3