{"action":"Upgrade @anthropic-ai/claude-code to 1.0.93 or later.","affected":[{"fixed":"1.0.93","introduced":"0"}],"component":"@anthropic-ai/claude-code","cve_ids":["CVE-2025-66032"],"ecosystem":"npm","epss":0.00688,"exploited":false,"fixed_versions":["1.0.93"],"ghsa_id":"GHSA-xq4m-mc3c-vvg3","id":"tcs_01M5KGJJAWG3MRM3R77H9X6M5K","modified_at":"2025-12-05T12:27:53.035426Z","published_at":"2025-12-03T16:27:19Z","references":["https://osv.dev/vulnerability/GHSA-xq4m-mc3c-vvg3","https://github.com/anthropics/claude-code/security/advisories/GHSA-xq4m-mc3c-vvg3","https://nvd.nist.gov/vuln/detail/CVE-2025-66032","https://github.com/anthropics/claude-code"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xq4m-mc3c-vvg3","url":"https://osv.dev/vulnerability/GHSA-xq4m-mc3c-vvg3"},{"source":"nvd","source_id":"CVE-2025-66032","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66032"}],"summary":"Claude Code Command Validation Bypass Allows Arbitrary Code Execution"}