npm/@anthropic-ai/claude-code CVE-2025-54795: critical 9.8, EPSS 1.04%

Claude Code echo command allowed bypass of user approval prompt for command execution

Action: Upgrade @anthropic-ai/claude-code to 1.0.20 or later.

npm i @anthropic-ai/claude-code@1.0.20

Affected

Fixed versions

Sources

• osv: GHSA-x56v-x2h6-7j34
• nvd: CVE-2025-54795
• https://github.com/anthropics/claude-code/security/advisories/GHSA-x56v-x2h6-7j34
• https://github.com/anthropics/claude-code

CVE-2025-54795 · published 2025-08-04T15:18:03Z · modified 2025-08-05T17:10:38Z · JSON