@musistudio/claude-code-router@1.0.19

Local Claude Code Router gateway with CLI and web management UI.

  • latest version

    3.0.21

  • latest non vulnerable version

  • first published

    1 years ago

  • latest version published

    8 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the @musistudio/claude-code-router package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Permissive Cross-domain Policy with Untrusted Domains

    @musistudio/claude-code-router is an Use Claude Code without an Anthropics account and route it to another LLM provider

    Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains due to improper CORS configuration. An attacker can access user API keys or equivalent credentials by sending requests from untrusted domains.

    How to fix Permissive Cross-domain Policy with Untrusted Domains?

    Upgrade @musistudio/claude-code-router to version 1.0.37 or higher.

    <1.0.37