Advisories · Technology
anthropics claude-code.
Every CVE that names anthropics claude-code among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
- anthropics claude-code
- Path traversal
- Race condition
- CVSS 7.5 High
Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable
- anthropics claude-code
- CWE-427
- CVSS 8.5 High
Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService
- anthropics claude-code
- Path traversal
- Privilege escalation
- CVSS 7.4 High
Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions
- anthropics claude-code
- Weak cryptography or TLS
- CWE-322