claude-code — Vulnerabilities & Security Advisories 27

This page catalogs Common Weakness Enumeration entries associated with the claude-code product developed by Anthropic. It aggregates security vulnerabilities identified within the Claude Code terminal-based coding assistant, a tool that leverages large language models to assist developers with software engineering tasks. The data presented covers weaknesses reported between January 2024 and the present, reflecting the evolving threat landscape as the product has transitioned from beta to general availability. Users can utilize this resource to track vendor advisories related to Anthropic’s code execution environment, understand specific weakness classes such as injection flaws or information disclosure that may arise from AI-driven code generation, and review the vulnerability history of this specific development tool. The collection focuses on distinct security flaws that impact the integrity, confidentiality, or availability of the system when interacting with local repositories or executing shell commands. By centralizing these records, the page aims to provide transparency into the security posture of the application without attributing blame or offering speculative analysis. This structured approach allows security professionals to assess risk factors, compare findings against similar AI-assisted development tools, and verify patch status across different versions of the software. The content is strictly informational, derived from public disclosures and verified reports, ensuring that the historical record remains accurate and accessible for compliance and auditing purposes.