Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/31 9:35 p.m.7 views

CVE-2026-34451 Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did no...

6.3CVSS5.8AI score0.00349EPSS
SaveExploits0References5
Rows per page
Query Builder