ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.50) +6 more potentially affected by CVE-2025-66032 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.90)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.27, =0.0.28 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-66032 Source advisory: OSV:GHSA-XQ4M-MC3C-VVG3...

GHSA-XQ4M-MC3C-VVG3 Claude Code Command Validation Bypass Allows Arbitrary Code Execution

Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible to bypass the Claude Code read-only validation and trigger arbitrary code execution. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on...

Claude Code 命令注入漏洞

Claude Code is a smart endpoint programming assistant that understands code bases and helps improve development efficiency through natural language commands that perform routine tasks, interpret complex code, handle Git workflows, and more, allowing developers to complete coding operations with...

Command Injection

Overview claude-statusline is a Real-time session tracking and analytics for Claude Code Affected versions of this package are vulnerable to Command Injection due to improper handling of subprocess calls. The instancemanager.py module constructs shell commands using string interpolation and passe...

Code Injection

@anthropic-ai/claude-code is vulnerable to code injection.The vulnerability is due to a flaw in the startup trust dialog that allows an attacker to trick the tool into executing untrusted project code before the user approves the dialog...

MAL-2025-191051 Malicious code in @relyt/claude-context-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7128c912d51fd365b62035c31a922a12b13bbc16e66c119bc931281f60d29922 The package @relyt/claude-context-mcp was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199145

Malicious code in @relyt/claude-context-mcp npm...

Malicious code in @relyt/claude-context-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7128c912d51fd365b62035c31a922a12b13bbc16e66c119bc931281f60d29922 The package @relyt/claude-context-mcp was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199147

Malicious code in @relyt/claude-context-core npm...

Malicious code in @relyt/claude-context-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c316b01a92bfd324ed27916a84ad109a9a198650509ea633aaa7ab97e5afcf9 The package @relyt/claude-context-core was found to contain malicious code. Source: ghsa-malware...

injection-research

injection-research A study comparing injection vulnerabilities...

EUVD-2025-198840

Malicious code in claude-token-updater npm...

Malicious code in claude-token-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550fa28731381189534b426c9da12b4bcf3734e203360b51e64c83343e04de32 The package claude-token-updater was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190837 Malicious code in claude-token-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550fa28731381189534b426c9da12b4bcf3734e203360b51e64c83343e04de32 The package claude-token-updater was found to contain malicious code. Source: ghsa-malware...

CVE-2025-64755

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31...

CVE-2025-64755 @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31...

CVE-2025-64755

CVE-2025-64755 affects Claude Code (Anthropic). A parsing error in sed command handling prior to version 2.0.31 allowed bypassing the read-only validation and writing to arbitrary host files (e.g., injection into shell config files). The issue enables potential arbitrary file writes and has been ...

EUVD-2025-198355

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31...

CVE-2025-64755 @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31...

CVE-2025-64755 @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31...