[ Vendor · 2 CVEs ]
anthropics
CVEs affecting anthropics published in the last 30 days, plus any anthropics CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96620 | 16 Oct 2026 | CVSS 9.2 | Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionClaude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without… | Fix |
| CVE-2026-86063 | 13 Oct 2026 | CVSS 7.5 | Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash PinningClaude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a… | Fix |