https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:21:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45136 <p><strong>Affected:</strong> cnighswonger claude-code-cache-fix</p> <p>claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code&#39;s hook stdin payload directly into a Python triple-quoted string literal. A &#39;&#39;&#39; byte sequence in any user-controlled field of the payload closes the literal early and lets following bytes execute as Python in the user&#39;s Claude Code process. This vulnerability is fixed in 3.5.2.</p> <p><strong>Affected:</strong> cnighswonger claude-code-cache-fix</p> <p>claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code&#39;s hook stdin payload directly into a Python triple-quoted string literal. A &#39;&#39;&#39; byte sequence in any user-controlled field of the payload closes the literal early and lets following bytes execute as Python in the user&#39;s Claude Code process. This vulnerability is fixed in 3.5.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-45136