4 ms·
The disclosure timeline is concerning. Reported 2025-11-17, and multiple "no responses" after repeated attempts to contact the maintainers... not a good look.
by AlexErrant 9mo ago
The disclosure timeline is concerning.
Reported 2025-11-17, and multiple "no responses" after repeated attempts to contact the maintainers... not a good look.
- pama 9mo agoit looks like opencode developers now try to take it seriously: https://github.com/anomalyco/opencode/issues/6355#issuecomment-3740105995 https://github.com/anomalyco/opencode/issues/6355#issuecomme...
- BoredPositron 9mo agoKeeping the rce as vendor advisement tells you everything you need to know on how serious they are about the security of their users.
- bayarearefugee 9mo agohey man, chill out. everybody is vibecoding now, and dealing with massive security issues is bad vibes.
- deleted 9mo ago[deleted]