npm/@anthropic-ai/sdk CVE-2026-41686: medium, EPSS 0.13%
Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
Action: Upgrade @anthropic-ai/sdk to 0.91.1 or later.
npm i @anthropic-ai/sdk@0.91.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.79.0 | 0.91.1 | - |
Fixed versions
| 0.91.1 |
Sources
- osv: GHSA-p7fg-763f-g4gf
- https://github.com/anthropics/anthropic-sdk-typescript/security/advisories/GHSA-p7fg-763f-g4gf
- https://nvd.nist.gov/vuln/detail/CVE-2026-41686
- https://github.com/anthropics/anthropic-sdk-typescript
CVE-2026-41686 · published · modified · JSON