The disclosure timeline is concerning. Reported 2025-11-17, and multiple "no res... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		AlexErrant 47 days ago \| parent \| context \| favorite \| on: Unauthenticated remote code execution in OpenCode The disclosure timeline is concerning. Reported 2025-11-17, and multiple "no responses" after repeated attempts to contact the maintainers... not a good look.

pama 47 days ago | [–]

it looks like opencode developers now try to take it seriously:

https://github.com/anomalyco/opencode/issues/6355#issuecomme...

BoredPositron 46 days ago | | [–]

Keeping the rce as vendor advisement tells you everything you need to know on how serious they are about the security of their users.

bayarearefugee 46 days ago | | [–]

hey man, chill out.

everybody is vibecoding now, and dealing with massive security issues is bad vibes.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact