EUVD-2025-19727

Malicious code in bioql PyPI...

EUVD-2024-31723

Malicious code in bioql PyPI...

EUVD-2021-30911

Malicious code in bioql PyPI...

EUVD-2025-17790

Malicious code in bioql PyPI...

EUVD-2022-7225

Malicious code in bioql PyPI...

EUVD-2023-59654

Malicious code in bioql PyPI...

EUVD-2025-4856

Malicious code in bioql PyPI...

EUVD-2023-53912

Malicious code in bioql PyPI...

EUVD-2022-3274

Malicious code in bioql PyPI...

EUVD-2022-3226

Malicious code in bioql PyPI...

EUVD-2024-3342

Malicious code in bioql PyPI...

EUVD-2023-46317

Malicious code in bioql PyPI...

EUVD-2024-0095

Malicious code in bioql PyPI...

EUVD-2022-26111

Malicious code in bioql PyPI...

EUVD-2022-7426

Malicious code in bioql PyPI...

EUVD-2025-20833

Malicious code in bioql PyPI...

EUVD-2022-0136

Malicious code in bioql PyPI...

UNIX Symbolic Link (Symlink) Following

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink...

GHSA-66M2-GX93-V996 Claude Code permission deny bypass through symlink

Claude Code failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update wil...

PT-2025-40539

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 1.0.120 Description An issue existed where Claude Code did not properly handle symlinks when enforcing permission deny rules. Specifically, if a user blocked Claude Code’s access to a file, but Claude Code had...