Threats affecting pkg:github/myselfyangjz/openCode

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

CVE-2026-22813 is a critical cross-site scripting (XSS) vulnerability in the anomalyco OpenCode AI coding agent's markdown renderer. The renderer inserts arbitrary HTML into the DOM without sanitization or Content Security Policy (CSP), allowing JavaScript execution on the localhost web interface. This enables attackers who can influence the LLM response in a chat session to execute malicious scripts in the context of the http://localhost:4096 origin. The vulnerability affects OpenCode versions prior to 1.1.10 and requires no authentication but does require user interaction to trigger. Although no known exploits are currently in the wild, the high CVSS score of 9.4 reflects the severe impact on confidentiality, integrity, and availability. The issue is fixed in version 1.1.

CVE-2026-22812 is a high-severity vulnerability in anomalyco's OpenCode AI coding agent versions prior to 1.0.216. The flaw involves the automatic startup of an unauthenticated HTTP server that permits any local process or any website (due to permissive CORS settings) to execute arbitrary shell commands with the user's privileges. This missing authentication for a critical function allows attackers to compromise confidentiality, integrity, and availability of affected systems. The vulnerability is fixed in version 1.0.216. Although no known exploits are currently reported in the wild, the ease of exploitation and potential impact make it a significant threat. European organizations using vulnerable OpenCode versions are at risk, especially those with development environments or CI/CD pipelines integrating this tool.