npm/@anthropic-ai/claude-code CVE-2025-59536: high 8.8, EPSS 24.89%

Claude Code can execute commands prior to the startup trust dialog

Action: Upgrade @anthropic-ai/claude-code to 1.0.111 or later.

npm i @anthropic-ai/claude-code@1.0.111

Affected

Fixed versions

Sources

• osv: GHSA-4fgq-fpq9-mr3g
• nvd: CVE-2025-59536
• https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g
• https://github.com/anthropics/claude-code

CVE-2025-59536 · published 2025-10-03T14:16:34Z · modified 2025-10-03T14:57:25.457969Z · JSON