3am-cli (0.1.0), 3am-diagnosis (0.1.0) +1406 more potentially affected by CVE-2026-41686 via @anthropic-ai/sdk (>=0.79.0, <=0.90.0)

@anthropic-ai/sdk NPM version =0.79.0, =0.5.0, =0.1.0, =1.0.0-alpha, =0.8.4, =0.1.8, =5.0.0, =5.0.0, =0.1.0, =1.3.0-canary.26.1, =1.0.8, =0.0.99, =0.1.50 and more Source cves: CVE-2026-41686 Source advisory: OSV:GHSA-P7FG-763F-G4GF...

PT-2026-36109

Name of the Vulnerable Software and Affected Versions Claude SDK for TypeScript versions 0.79.0 through 0.91.0 Description The BetaLocalFilesystemMemoryTool creates memory files and directories using Node.js default modes 0o666 for files and 0o777 for directories. This results in files being...