CVE-2026-22813
1 advisory.
npm/opencode-ai CVE-2026-22813: critical, EPSS 0.91%
Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Action: Upgrade opencode-ai to 1.1.10 or later.
npm i opencode-ai@1.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.10 | - |
Fixed versions
| 1.1.10 |
Sources
- osv: GHSA-c83v-7274-4vgp
- https://github.com/anomalyco/opencode/security/advisories/GHSA-c83v-7274-4vgp
- https://nvd.nist.gov/vuln/detail/CVE-2026-22813
- https://github.com/anomalyco/opencode
CVE-2026-22813 · published · modified · JSON