Repository navigation

Release v3.8.17 - #3448

Merged

diegosouzapw merged 34 commits into

mainfrom

release/v3.8.17

Jun 9, 2026

Merged

Release v3.8.17#3448
diegosouzapw merged 34 commits into
mainfrom
release/v3.8.17

GitHub Advanced Security / CodeQL failed Jun 9, 2026 in 4s

7 new alerts including 1 critical severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

1 critical
5 high
1 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 451 in @omniroute/opencode-plugin/src/index.ts

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This

that depends on

may run slow on strings with many repetitions of '\t'.
This

that depends on

may run slow on strings with many repetitions of '\t'.

Check failure on line 450 in @omniroute/opencode-plugin/src/index.ts

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This

that depends on

may run slow on strings with many repetitions of '\t'.
This

that depends on

may run slow on strings with many repetitions of '\t'.

Check failure on line 120 in @omniroute/opencode-plugin/src/naming.ts

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This

that depends on

may run slow on strings with many repetitions of '\t'.
This

that depends on

may run slow on strings with many repetitions of '\t'.
This

that depends on library input may run slow on strings with many repetitions of '\t'.

Check failure on line 119 in @omniroute/opencode-plugin/src/naming.ts

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This

that depends on

may run slow on strings with many repetitions of '\t'.
This

that depends on

may run slow on strings with many repetitions of '\t'.
This

that depends on library input may run slow on strings with many repetitions of '\t'.

Check failure on line 441 in open-sse/executors/gemini-business.ts

Code scanning / CodeQL

Use of password hash with insufficient computational effort High

Password from

is hashed insecurely.

Check failure on line 96 in src/lib/cli-helper/config-generator/opencode.ts

Code scanning / CodeQL

Server-side request forgery Critical

The

of this request depends on a

.

Check warning on line 210 in open-sse/executors/lmarena.ts

Code scanning / CodeQL

Information exposure through a stack trace Medium

This information exposed to the user depends on

.