anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 02:05:26 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

VS Code extension: bun audit vulnerabilities #8195

New Issue
Open
opened 2026-02-16 18:09:23 -05:00 by yindo · 0 comments
yindo commented 2026-02-16 18:09:23 -05:00
Owner
Copy Link
Copy Source

Originally created by @IIMrRobotII on GitHub (Jan 31, 2026).

Originally assigned to: @thdxr on GitHub.

Summary

bun audit in sdks/vscode reports 4 vulnerabilities (1 high, 1 moderate, 2 low):

Environment

  • OpenCode version: 1.1.48
  • OS: Linux Ubuntu 24.04 LTS (WSL2 via Windows 11)

Suggested Fix

Update dev dependencies and add overrides for transitive glob, diff, and js-yaml to pin patched versions until upstream updates.

Originally created by @IIMrRobotII on GitHub (Jan 31, 2026). Originally assigned to: @thdxr on GitHub. ## Summary `bun audit` in `sdks/vscode` reports 4 vulnerabilities (1 high, 1 moderate, 2 low): - glob (high): command injection via CLI - https://github.com/advisories/GHSA-5j98-mcp5-4vw2 - js-yaml (moderate): prototype pollution - https://github.com/advisories/GHSA-mh29-5h37-fv8m - diff (low): DoS in parsePatch - https://github.com/advisories/GHSA-73rr-hh4g-fpgx - @eslint/plugin-kit (low): ReDoS - https://github.com/advisories/GHSA-xffm-g5w8-qvg7 ## Environment - OpenCode version: 1.1.48 - OS: Linux Ubuntu 24.04 LTS (WSL2 via Windows 11) ## Suggested Fix Update dev dependencies and add overrides for transitive `glob`, `diff`, and `js-yaml` to pin patched versions until upstream updates.
yindo added the windows label 2026-02-16 18:09:23 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label windows
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#8195
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?