PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
@anthropic-ai/claude-code Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning High Risk 8.0 6 hours ago 6 hours ago
@anthropic-ai/claude-code Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution High Risk 8.0 2 months ago 2 months ago
@anthropic-ai/claude-code Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch Critical 9.1 4 months ago 2 months ago
@anthropic-ai/claude-code @anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write Medium Risk 6.0 3 months ago 3 months ago
@anthropic-ai/claude-code Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution High Risk 8.0 5 months ago 5 months ago
@anthropic-ai/claude-code Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace Critical 10.0 5 months ago 5 months ago
@anthropic-ai/claude-code Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows High Risk 7.3 6 months ago 5 months ago
@anthropic-ai/claude-code Claude Code has Permission Deny Bypass Through Symbolic Links Low Risk 3.0 8 months ago 6 months ago
@anthropic-ai/claude-code Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File High Risk 8.0 7 months ago 6 months ago
@anthropic-ai/claude-code Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json High Risk 8.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions High Risk 8.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection High Risk 8.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes High Risk 8.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code has a Command Injection in find Command Bypasses User Approval Prompt High Risk 8.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains High Risk 8.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation Medium Risk 6.0 8 months ago 8 months ago
@anthropic-ai/claude-code Claude Code vulnerable to command execution prior to startup trust dialog High Risk 8.0 11 months ago 9 months ago
@anthropic-ai/claude-code Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions High Risk 8.0 1 year ago 9 months ago
@anthropic-ai/claude-code Claude Code Command Validation Bypass Allows Arbitrary Code Execution High Risk 8.0 10 months ago 10 months ago
@anthropic-ai/claude-code @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes High Risk 8.0 10 months ago 10 months ago
@anthropic-ai/claude-code Claude Code permission deny bypass through symlink Low Risk 3.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code can execute commands prior to the startup trust dialog High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code rg vulnerability does not protect against approval prompt bypass High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code echo command allowed bypass of user approval prompt for command execution High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access High Risk 8.0 1 year ago 1 year ago
@anthropic-ai/claude-code Claude Code Improper Authorization via websocket connections from arbitrary origins High Risk 8.0 1 year ago 1 year ago
Data courtesy of OSV.dev
Page 1