@anthropic-ai/claude-code vulnerabilities (npm)
29 vulnerabilities.
-
@anthropic-ai/claude-codenpm Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning 7.5 High -
@anthropic-ai/claude-codenpm Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution 7.7 High -
@anthropic-ai/claude-codenpm Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write 4.4 Medium -
@anthropic-ai/claude-codenpm Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch 6.0 Medium -
@anthropic-ai/claude-codenpm Claude Code arbitrary code execution via git worktree commondir trust dialog bypass 7.7 High -
@anthropic-ai/claude-codenpm Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace 7.7 High -
@anthropic-ai/claude-codenpm Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows 5.4 Medium -
@anthropic-ai/claude-codenpm Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File 7.7 High -
@anthropic-ai/claude-codenpm Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json 7.7 High -
@anthropic-ai/claude-codenpm Claude Code Has Permission Deny Bypass Through Symbolic Links 2.3 Low -
@anthropic-ai/claude-codenpm Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions 7.7 High -
@anthropic-ai/claude-codenpm Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection 7.7 High -
@anthropic-ai/claude-codenpm Claude Code has a Command Injection in find Command Bypasses User Approval Prompt 7.7 High -
@anthropic-ai/claude-codenpm Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes 7.7 High -
@anthropic-ai/claude-codenpm Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains 7.1 High -
@anthropic-ai/claude-codenpm Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation 5.3 Medium -
@anthropic-ai/claude-codenpm Claude Code Command Validation Bypass Allows Arbitrary Code Execution 8.7 High -
@anthropic-ai/claude-codenpm @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes 8.7 High -
@anthropic-ai/claude-codenpm Claude Code vulnerable to command execution prior to startup trust dialog 7.7 High -
@anthropic-ai/claude-codenpm Claude Code: Permission deny bypass is possible through symlink 2.3 Low -
@anthropic-ai/claude-codenpm Claude Code's startup trust dialog could lead to Command Execution attack 8.7 High -
@anthropic-ai/claude-codenpm Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions 7.7 High -
@anthropic-ai/claude-codenpm Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email 8.7 High -
@anthropic-ai/claude-codenpm Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution 8.7 High -
@anthropic-ai/claude-codenpm Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning 8.7 High -
@anthropic-ai/claude-codenpm Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code 7.1 High -
@anthropic-ai/claude-codenpm Claude Code echo command allowed bypass of user approval prompt for command execution 8.7 High -
@anthropic-ai/claude-codenpm Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access 7.7 High -
@anthropic-ai/claude-codenpm Claude Code IDE extensions allow websocket connections from arbitrary origins 8.8 High