Skip to content
OpenAdvisories

Product · anthropics

anthropic-sdk-typescript

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-41686

    Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

    Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and direct…

    anthropics anthropic-sdk-typescript @anthropic-ai/sdk npm
  • Medium 6.3
    CVE-2026-34451

    Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

    Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths u…

    anthropics anthropic-sdk-typescript @anthropic-ai/sdk npm