tag

Claude-Code

Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316

CVE-2026-54316 (GHSA-fg94-h982-f3mm)· @anthropic-ai/claude-code (npm package, Claude Code CLI) patched