Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/31 9:35 p.m.36 views

CVE-2026-34451 Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did no...

6.3CVSS0.00349EPSS
SaveExploits0References3
Rows per page
Query Builder