{"action":"Upgrade @anthropic-ai/claude-code to 0.2.111 or later.","affected":[{"fixed":"0.2.111","introduced":"0"}],"component":"@anthropic-ai/claude-code","cve_ids":["CVE-2025-54794"],"ecosystem":"npm","epss":0.01451,"exploited":false,"fixed_versions":["0.2.111"],"ghsa_id":"GHSA-pmw4-pwvc-3hx2","id":"tcs_01M5KG42GBX8W7D6T8TJ9J87A1","modified_at":"2025-08-05T17:10:27Z","published_at":"2025-08-04T15:15:52Z","references":["https://osv.dev/vulnerability/GHSA-pmw4-pwvc-3hx2","https://github.com/anthropics/claude-code/security/advisories/GHSA-pmw4-pwvc-3hx2","https://nvd.nist.gov/vuln/detail/CVE-2025-54794","https://github.com/anthropics/claude-code"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-pmw4-pwvc-3hx2","url":"https://osv.dev/vulnerability/GHSA-pmw4-pwvc-3hx2"},{"source":"nvd","source_id":"CVE-2025-54794","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54794"}],"summary":"Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access"}