CVE-2026-45136
1 advisory.
npm/claude-code-cache-fix CVE-2026-45136: high 7.8
claude-code-cache-fix vulnerable to local code execution via Python triple-quote injection in tools/quota-statusline.sh
Action: Upgrade claude-code-cache-fix to 3.5.2 or later.
npm i claude-code-cache-fix@3.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.0 | 3.5.2 | - |
Fixed versions
| 3.5.2 |
Sources
- osv: GHSA-g3xq-3gmv-qq8g
- https://github.com/cnighswonger/claude-code-cache-fix/security/advisories/GHSA-g3xq-3gmv-qq8g
- https://nvd.nist.gov/vuln/detail/CVE-2026-45136
- https://github.com/cnighswonger/claude-code-cache-fix/issues/108
- https://github.com/cnighswonger/claude-code-cache-fix/pull/110
- https://github.com/cnighswonger/claude-code-cache-fix/commit/613e4df30547f3e6baf32d161eddc828f171da17
- https://github.com/cnighswonger/claude-code-cache-fix
CVE-2026-45136 · published · modified · JSON