Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55607 |
|
Path Traversal in anthropic (CVE-2026-55607)
path traversal in anthropic (CVE-2026-55607). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.163` or later.
|
| CVE-2026-46406 |
|
Vulnerability in @anthropic-ai/claude-code (CVE-2026-46406)
vulnerability in @anthropic-ai/claude-code (CVE-2026-46406). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.128` or later.
|
| CVE-2026-54316 |
|
Vulnerability in @anthropic-ai/claude-code (CVE-2026-54316)
vulnerability in @anthropic-ai/claude-code (CVE-2026-54316). Confidential information can be exposed externally. Mitigation: upgrade to `2.1.163` or later.
|
| CVE-2026-44467 |
|
Vulnerability in anthropic (CVE-2026-44467)
vulnerability in anthropic (CVE-2026-44467). Confidential information can be exposed externally. Mitigation: upgrade to `1.4304.0` or later.
|
| CVE-2026-44470 |
|
Vulnerability in privilege-escalation (CVE-2026-44470)
vulnerability in privilege-escalation (CVE-2026-44470). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3834.0` or later.
|
| CVE-2026-41686 |
|
Vulnerability in @anthropic-ai/sdk (CVE-2026-41686)
vulnerability in @anthropic-ai/sdk (CVE-2026-41686). Risk of unauthorized operations or information disclosure. Exploitable via ``BetaLocalFilesystemMemoryTool``. Mitigation: upgrade to `0.91.1` or later.
|
| CVE-2026-40068 |
|
Vulnerability in @anthropic-ai/claude-code (CVE-2026-40068)
vulnerability in @anthropic-ai/claude-code (CVE-2026-40068). Successful exploitation can lead to full system takeover. Exploitable via ``commondir``. Mitigation: upgrade to `2.1.84` or later.
|
| CVE-2026-22561 |
|
Vulnerability in privilege-escalation (CVE-2026-22561)
vulnerability in privilege-escalation (CVE-2026-22561). Successful exploitation can lead to full system takeover.
|