Login Request a demo
AN
Vendor
anthropics
6 products with CVEs on record
38
CVEs
0
On KEV
2
New 30D
Products
CL
claude-code
anthropics
10.0
30 CVEs0 on KEV1 new
CL
claude-agent-sdk-python
anthropics
9.2
1 CVEs0 on KEV1 new
AN
anthropic-sdk-python
anthropics
5.3
2 CVEs0 on KEV0 new
AN
anthropic-sdk-typescript
anthropics
5.4
2 CVEs0 on KEV0 new
BU
buffa
anthropics
6.3
2 CVEs0 on KEV0 new
CL
claude-code-action
anthropics
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-96620
CL
claude-agent-sdk-python
anthropics
9.2
1%
Oct 16Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
CVE-2026-86063
CL
claude-code
anthropics
7.5
0%
Oct 13Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
CVE-2026-47751
CL
claude-code-action
anthropics
5.3
1%
Jul 16Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
CVE-2026-55407
BU
buffa
anthropics
6.3
1%
Jul 16Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation
CVE-2026-55406
BU
buffa
anthropics
5.9
0%
Jul 16Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref
CVE-2026-55607
CL
claude-code
anthropics
8.8
1%
Jun 29Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution
CVE-2026-46406
CL
claude-code
anthropics
6.1
0%
Jun 29Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write
CVE-2026-54316
CL
claude-code
anthropics
9.1
1%
Jun 23Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
CVE-2026-44470
CL
claude-code
anthropics
7.8
0%
May 13Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService
CVE-2026-44467
CL
claude-code
anthropics
6.8
0%
May 13Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions
CVE-2026-40068
CL
claude-code
anthropics
8.8
0%
May 5Claude Code arbitrary code execution via git worktree commondir trust dialog bypass
CVE-2026-41686
AN
anthropic-sdk-typescript
anthropics
4.4
0%
May 4Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
CVE-2026-39861
CL
claude-code
anthropics
10.0
1%
Apr 21Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace
CVE-2026-35603
CL
claude-code
anthropics
7.3
0%
Apr 17Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows
CVE-2026-34451
AN
anthropic-sdk-typescript
anthropics
5.4
0%
Mar 31Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
CVE-2026-34450
AN
anthropic-sdk-python
anthropics
4.4
0%
Mar 31Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool
CVE-2026-34452
AN
anthropic-sdk-python
anthropics
5.3
0%
Mar 31Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
CVE-2026-33068
CL
claude-code
anthropics
8.8
0%
Mar 20Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File
CVE-2026-25725
CL
claude-code
anthropics
10.0
1%
Feb 6Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json
CVE-2026-25724
CL
claude-code
anthropics
7.5
0%
Feb 6Claude Code Has Permission Deny Bypass Through Symbolic Links
CVE-2026-25723
CL
claude-code
anthropics
6.5
0%
Feb 6Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
CVE-2026-25722
CL
claude-code
anthropics
9.1
1%
Feb 6Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection
CVE-2026-24887
CL
claude-code
anthropics
8.8
1%
Feb 3Claude Code has a Command Injection in find Command Bypasses User Approval Prompt
CVE-2026-24053
CL
claude-code
anthropics
6.5
1%
Feb 3Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
CVE-2026-24052
CL
claude-code
anthropics
7.4
0%
Feb 3Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains
CVE-2026-21852
CL
claude-code
anthropics
7.5
28%
Jan 21Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
CVE-2025-66032
CL
claude-code
anthropics
9.8
1%
Dec 3Claude Code Command Validation Bypass Allows Arbitrary Code Execution
CVE-2025-64755
CL
claude-code
anthropics
9.8
1%
Nov 21@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes
CVE-2025-65099
CL
claude-code
anthropics
9.8
1%
Nov 19Claude Code vulnerable to command execution prior to startup trust dialog
CVE-2025-59829
CL
claude-code
anthropics
6.5
0%
Oct 3Claude Code: Permission deny bypass is possible through symlink
CVE-2025-59536
CL
claude-code
anthropics
8.8
27%
Oct 3Claude Code's startup trust dialog could lead to Command Execution attack
CVE-2025-59828
CL
claude-code
anthropics
9.8
0%
Sep 24Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
CVE-2025-59041
CL
claude-code
anthropics
9.8
1%
Sep 10Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
CVE-2025-58764
CL
claude-code
anthropics
9.8
1%
Sep 10Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution
CVE-2025-55284
CL
claude-code
anthropics
7.5
1%
Aug 16Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
CVE-2025-54794
CL
claude-code
anthropics
9.1
1%
Aug 5Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access
CVE-2025-54795
CL
claude-code
anthropics
9.8
1%
Aug 5Claude Code echo command allowed bypass of user approval prompt for command execution
CVE-2025-52882
CL
claude-code
anthropics
8.8
0%
Jun 24Claude Code IDE extensions allow websocket connections from arbitrary origins