3.0.21
1 years ago
8 days ago
Known vulnerabilities in the @musistudio/claude-code-router package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
@musistudio/claude-code-router is an Use Claude Code without an Anthropics account and route it to another LLM provider Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains due to improper CORS configuration. An attacker can access user API keys or equivalent credentials by sending requests from untrusted domains. How to fix Permissive Cross-domain Policy with Untrusted Domains? Upgrade | <1.0.37 |