@anthropic-ai/sdk vulnerabilities (npm)

2 vulnerabilities.

• @anthropic-ai/sdk npm Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool CVE-2026-41686 Fix available 4.8 MediumApril 29, 2026
• @anthropic-ai/sdk npm Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories CVE-2026-34451 Fix available 6.3 MediumMarch 31, 2026