Skip to content
OpenAdvisories

Package · npm

claude-code-cache-fix

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-45136

    claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh

    claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code's hook stdin payload directly into a Python triple-quoted string literal. A ''' byte seq…

    cnighswonger claude-code-cache-fix claude-code-cache-fix npm