anomalyco opencode

• CVE-2026-119025 High 7.5 open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows 1.4%
• CVE-2026-22813 Critical 9.4 Malicious website can execute commands on the local system through XSS in the OpenCode web UI 0.9%
• CVE-2026-22812 High 8.8 OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution 16.5%