Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/29 10:28 p.m.8 views

GHSA-P7FG-763F-G4GF Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

The BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and directories using the Node.js default modes 0o666 for files, 0o777 for directories, leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask su...

4.8CVSS5.8AI score0.00119EPSS
SaveExploits0References3
Rows per page
Query Builder