Snyk Security Database

@anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.

Affected versions of this package are vulnerable to Directory Traversal via write-time symlink following in the file write path. The tool validates that a target file path resides within the project working directory at permission-check time, but re-resolves the path at write time without repeating that validation. An attacker with write access to the shared workspace can atomically replace a project file with a symlink during this TOCTOU gap, causing the tool to follow the symlink and write output to an arbitrary file outside the project sandbox. This enables a lower-privileged attacker to redirect benign edits to sensitive files (e.g., shell configuration) in a higher-privileged session.

agno is an Agno: a lightweight library for building Multi-Agent Systems

Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the get_authentication_dependency function in auth.py, where manipulation of the security_key argument allows an attacker to bypass authentication entirely. A remote, unauthenticated attacker can exploit this to gain unauthorized access, potentially reading, modifying, or disrupting protected resources.

org.apache.jackrabbit:jackrabbit-webdav is a Generic WebDAV Library

Affected versions of this package are vulnerable to Session Fixation in the WebDAV authentication process due to the server attaching a cached authenticated session to any matching Lock-Token, TransactionId, SubscriptionId, or If-header field token without verifying credentials. An attacker can gain unauthorized access to another user's session by supplying a derivable or previously used token.