@anthropic-ai/claude-code vulnerabilities

1 known vulnerability in @anthropic-ai/claude-code from Anthropic. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  @anthropic-ai/claude-code: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-103435Oct 7, 2026Anthropic

  Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use (TOCTOU) gap allowed an attacker wh