anthropics/claude-code Security Advisories | GitStock

high2025-10-03

Claude Code can execute commands prior to the startup trust dialog

GHSA-4fgq-fpq9-mr3g · CVE-2025-59536

high2025-09-24

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

GHSA-2jjv-qf24-vfm4 · CVE-2025-59828

high2025-09-10

Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

GHSA-j4h9-wv2m-wrf7 · CVE-2025-59041

high2025-09-10

Claude Code rg vulnerability does not protect against approval prompt bypass

GHSA-qxfv-fcpc-w36x · CVE-2025-58764

high2025-09-03

Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning

GHSA-ph6w-f82w-28w6

high2025-08-18

Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

GHSA-x5gv-jw7f-j6xj · CVE-2025-55284

high2025-08-04

Claude Code echo command allowed bypass of user approval prompt for command execution

GHSA-x56v-x2h6-7j34 · CVE-2025-54795

high2025-08-04

Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

GHSA-pmw4-pwvc-3hx2 · CVE-2025-54794

high2025-06-23

Claude Code Improper Authorization via websocket connections from arbitrary origins

GHSA-9f65-56v6-gxw7 · CVE-2025-52882