Advisories · Technology
@anthropic-ai/claude-code.
Every CVE that names @anthropic-ai/claude-code among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code
- @anthropic-ai/claude-code
- Path traversal
- Race condition
- CVSS 2.0 Low
Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when…
- @anthropic-ai/claude-code
- CWE-696