MEDIUM5.4npm
GHSA-5474-4w2j-mq4c· CVE-2026-34451Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
Modified: 5/5/2026
package
npm/@anthropic-ai/sdk
pkg:npm/%40anthropic-ai/sdk
MEDIUMnpm
GHSA-p7fg-763f-g4gf· CVE-2026-41686Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
Modified: 5/8/2026