Advisories · Technology

jarrodwatts claude-hud.

Every CVE that names jarrodwatts claude-hud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47092 CVE record

CVSS 7.3 High

Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable
- jarrodwatts claude-hud
- CWE-427
Not analysed yet 18 May 2026
CVE-2026-47091 CVE record

CVSS 4.8 Medium

Claude HUD 0.0.12 Path Traversal via transcript_path
- jarrodwatts claude-hud
- Path traversal
Not analysed yet 18 May 2026
CVE-2026-47090 CVE record

CVSS 2.4 Low

Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks
- jarrodwatts claude-hud
- CWE-150
Not analysed yet 18 May 2026