Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.0.28 ·

Improved Path Traversal Detection

Entry
JSON All of v2.0.28
EntryKind: in v2.0.28,
ChangesSection of the release

What: Enhanced security check now detects paths with 3+ consecutive dots (e.g., ..., ....) as suspicious Windows path patterns.

Why this matters: Attackers sometimes use unusual dot sequences to bypass basic .. filters. While ... isn't standard, blocking it prevents potential exploits in path normalization edge cases.

Details:

  • Adds regex check /\.{3,}/ to Windows path validation
  • Blocks paths like C:\Users\....\file.txt or path/to/.../folder
  • Triggers manual approval prompt: "contains a suspicious Windows path pattern"
  • Complements existing checks for reserved names, alternate data streams, and other Windows-specific attacks
  • Evidence: Modified function tf2() at line 465855 (renamed from mf2()); new check at line 465867

See this entry in the whole of v2.0.28 →

Feedback