Unverified50% confidenceEventExact time
ZCode officially acknowledged security vulnerabilities in the product and apologized to users, with the open-source action stemming from security issues exposed by the community.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/21/2026
First Seen
Valid until: 12/20/2026
Sources
Related Entities
Related Claims
UnverifiedThe ZCode v3.14.0 client has completed security remediation, the Repo Wiki feature has been removed, and the workflow that generates and uploads local repository snapshots has been disabled.66% similarUnverifiedExecuting code from untrusted sources is one of the most fundamental taboos in software security, and should be guarded against through measures such as code signing, package manager verification, and sandboxed execution.59% similarUnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/938148API
curl https://kongchang.com/api/v1/knowledge/claims/938148MCP
get_claim(id=938148)