npm/@anthropic-ai/claude-code CVE-2025-58764: critical 9.8, EPSS 0.55%

Claude Code rg vulnerability does not protect against approval prompt bypass

Action: Upgrade @anthropic-ai/claude-code to 1.0.105 or later.

npm i @anthropic-ai/claude-code@1.0.105

Affected

Fixed versions

Sources

• osv: GHSA-qxfv-fcpc-w36x
• nvd: CVE-2025-58764
• https://github.com/anthropics/claude-code/security/advisories/GHSA-qxfv-fcpc-w36x
• https://github.com/anthropics/claude-code

CVE-2025-58764 · published 2025-09-10T17:10:42Z · modified 2025-09-10T21:14:12Z · JSON