Skip to content
OpenAdvisories

Vendor

Anthropic

6 known vulnerabilities.

Products

@anthropic-ai/claude-code 2 Claude Desktop Cowork 1 MCP TypeScript SDK 1 Claude Desktop - Windows 1 Slack MCP Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34072

    Anthropic Slack MCP Server Data Exfiltration via Link Unfurling

    A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server via automatic link unfurling. When an AI agent using the Slack MCP Server processes untrusted data, it can be manipulated to generate messages contain…

    Anthropic Slack MCP Server