EUVD-2022-40515

Malicious code in bioql PyPI...

EUVD-2025-20551

Malicious code in bioql PyPI...

EUVD-2024-47034

Malicious code in bioql PyPI...

EUVD-2022-3123

Malicious code in bioql PyPI...

EUVD-2024-3419

Malicious code in bioql PyPI...

EUVD-2022-48291

Malicious code in bioql PyPI...

EUVD-2022-2725

Malicious code in bioql PyPI...

EUVD-2024-41380

Malicious code in bioql PyPI...

EUVD-2022-26875

Malicious code in bioql PyPI...

Arbitrary Code Injection

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Arbitrary Code Injection via th...

Claude Code can execute commands prior to the startup trust dialog

Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update...

GHSA-4FGQ-FPQ9-MR3G Claude Code can execute commands prior to the startup trust dialog

Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update...

CVE-2025-59536 Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires...

CVE-2025-59536 Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires...

CVE-2025-59536

Claude Code (Anthropic) versions before 1.0.111 are vulnerable to code injection due to a flaw in the startup trust dialog. An attacker could trick a user into starting Claude Code in an untrusted project directory, causing code from that project to execute before the user accepts the startup tru...

PT-2025-40458

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 1.0.111 Description Claude Code is an agentic coding tool. A bug in the startup trust dialog implementation allows for Code Injection, where the tool can be tricked into executing code contained within a project...

CVE-2025-59536: Improper Control of Generation of Code

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires...

Claude Code 代码注入漏洞

Claude Code is an open source proxy coding tool from Anthropic. A code injection vulnerability exists in Claude Code versions prior to 1.0.111, which stems from a flaw in the implementation of the startup trust dialog box that could lead to a code injection attack...

Poscube Assist 信任管理问题漏洞

Poscube Assist is a mobile reporting tool from Poscube Turkey. A trust management issue vulnerability exists in Poscube Assist version 10.02.2025 and earlier, which stems from bypassing authorization using hard-coded credentials and user control keys, which could lead to authentication bypass...

Foxit PDF Reader for Mac < 2025.2.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2025.2.1. It is, therefore affected by multiple vulnerabilities: - Addressed potential issues where the application could deliver incorrect...