oss-scanner

OSS Scanner OSS Scanner is a service by Anthropic to scan critical open-source repositories for security vulnerabilities. Learn more about the service at red.anthropic.com/oss-scanner. Note, use of this tool is subject to the terms and conditions outlined in the OSS Scanner terms. How to sign up...

vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak

vLLM = 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitizemessage to the OpenAI router but the Anthropic-compatible router /v1/messages echoes strexc directly. id: CVE-2026-54236 info: name: vLLM = 0.23.0 - Anthropic Router Heap Address Information Leak author: kenlacroix...

MCP Inspector < 0.14.0 UnauthenticatedRemote Code Execution

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. id...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 332 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions | ---|--- Anthropic Research Tracking...

Anthropic-Cybersecurity-Skills

Anthropic Cybersecurity Skills The largest open-source cybersecurity skills library for AI agents !Hermes Agenthttps://img.shields...

defending-code-reference-harness

Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...

CVE-2026-21852-PoC

Claude Code Vulnerability Educational Demo This project demonstrates three vulnerabilities disclosed by Check Point Research in Anthropic's Claude Code CLI tool. It is designed for cybersecurity students and researchers to understand how AI development tool supply-chain attacks work...

CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back

🧠 CVE-2025-54794: Hijacking Claude AI with a Prompt Injection – The Jailbreak That Talked Back By Aditya Bhatt | Offensive Security Specialist | Red Team Operator | VAPT Addict ⚔️ Introduction: When Your AI Can Be Hacked With Words In an era where language models have become the co-pilots of our...

synaptic-sentinel

SYNAPTIC Sentinel The vibe-coding security sentinel. An Apache-2.0 agentic security toolkit for projects where most of the code is written by AI. Five deterministic scouts catch the syntactic problems; a Brain Layer BYOK Anthropic decides what really matters and how to fix it — all inside the IDE...

cve-2025-65099

Proof of Concept for CVE-2025-65099 Further details are provided in the published article. yarnPath Technique A vulnerable environment for yarnPath can be initialized as follows: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq && DEBIANFRONTEND=noninteractive...

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and...

Anthropic Claude Code < 2.1.179 Plugin Hash Pinning Bypass (CVE-2026-86063)

The version of Anthropic Claude Code installed on the remote host is prior to 2.1.179. It is, therefore, affected by a hash pinning bypass vulnerability: - The plugin install flow in Claude Code checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting...

ai.aarvion:aarvion-sdk-anthropic (>=0.1.0, <=0.2.0), ai.aarvion:aarvion-sdk-apache (>=0.1.0, <=0.2.0) +12598 more potentially affected by CVE-2026-110879 via com.fasterxml.jackson.core:jackson-databind (>=2.22.0, <=2.22.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.22.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.9.3, =0.9.4, =0.9.11 and more Source cves: CVE-2026-110879 Source advisory: MEND:CVE-2026-110879...

Malware in api-anthropic

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18055 Malicious code in api-anthropic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19164d6b4b781d022a4bc75ae45fae6d20737ddc0b711057e89990d39efc8df5 The npm package api-anthropic impersonates Anthropic branding both the package name and the destination domain api-anthropic.help and reconfigures th...

Malicious code in api-anthropic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19164d6b4b781d022a4bc75ae45fae6d20737ddc0b711057e89990d39efc8df5 The npm package api-anthropic impersonates Anthropic branding both the package name and the destination domain api-anthropic.help and reconfigures th...

Malicious Package

Overview api-anthropic is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +36 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.175)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-86063 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-21201048...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +36 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.175)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-86063 Source advisory: OSV:GHSA-PQ7J-F95F-QFCV...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +36 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.175)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-86063 Source advisory: GHSA-PQ7J-F95F-QFCV...