Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v1.0.77 Home All releases olderv1.0.76 v1.0.78newer
Claude Code v1.0.77

Fixed: Shell Command Injection Vulnerabilities

  • Issue: Complex shell constructs like heredocs could bypass escaping
  • Cause: Standard shell-quote libraries don't handle all edge cases
  • Resolution: Implemented custom pattern detection and multi-layer escaping strategy

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v1.0.77 →