Description
Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| anthropics | claude-code | < 2.0.31 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @anthropic-ai/claude-code | < 2.0.31 | 2.0.31 | GHSA-7mv8-j34q-vp7q |