PoC Archive PoC Archive

tag

Cwe-183

Medium
Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316
CVE-2026-54316 (GHSA-fg94-h982-f3mm)· @anthropic-ai/claude-code (npm package, Claude Code CLI) patched