← All credits
Tong Hoang Gia (uziii2208)
15 vulnerability records and advisories credit this contributor.
CVE-2026-88899
knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
CVE-2026-88938
knowns through 0.33.0 Path Traversal via code.find MCP tool
CVE-2026-88940
knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint
CVE-2026-88939
knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
CVE-2026-88937
knowns through 0.33.0 Path Traversal via Template Engine
CVE-2026-86775
knowns before 0.30.0 Path Traversal via Document API
CVE-2026-86544
knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions
CVE-2026-86543
knowns before 0.30.0 Unauthenticated Management API Exposure
CVE-2026-86542
knowns before 0.30.0 Path Traversal via Import Name
CVE-2026-86541
knowns before 0.30.0 Path Traversal via code.replace MCP action