As cited
Copy frozen at (site build).
vulnerabilities
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
OpenCode deployed a silent patch for a critical remote code execution (RCE) vulnerability without public disclosure, according to researchers at Pillar Security. Users running unpatched versions remain exposed to the flaw, unaware of the risk.
Why it matters: OpenCode users must verify their software version immediately to confirm whether they have received the patch, as silent patching leaves systems vulnerable to RCE attacks if updates are not applied.
- Source published
- First seen by Cybersecurity Tracker