{"action":"Upgrade @anthropic-ai/sdk to 0.81.0 or later.","affected":[{"fixed":"0.81.0","introduced":"0.79.0"}],"component":"@anthropic-ai/sdk","cve_ids":["CVE-2026-34451"],"ecosystem":"npm","epss":0.00392,"exploited":false,"fixed_versions":["0.81.0"],"ghsa_id":"GHSA-5474-4w2j-mq4c","id":"tcs_01M5KF2GGYVRGKSWRD30PK25P2","modified_at":"2026-05-05T16:01:30.184364Z","published_at":"2026-04-01T21:16:49Z","references":["https://osv.dev/vulnerability/GHSA-5474-4w2j-mq4c","https://github.com/anthropics/anthropic-sdk-typescript/security/advisories/GHSA-5474-4w2j-mq4c","https://nvd.nist.gov/vuln/detail/CVE-2026-34451","https://github.com/anthropics/anthropic-sdk-typescript/commit/0ac69b3438ee9c96b21a7d3c39c07b7cdb6995d9","https://github.com/anthropics/anthropic-sdk-typescript","https://github.com/anthropics/anthropic-sdk-typescript/releases/tag/sdk-v0.81.0"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-5474-4w2j-mq4c","url":"https://osv.dev/vulnerability/GHSA-5474-4w2j-mq4c"}],"summary":"Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories"}