Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.248 ·

Denylist of shell startup variables added

A list names shell variables that can hijack a startup, with no visible consumer.

Under the hood Nothing to try yet In Development
JSON All of v2.1.248
Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
In DevelopmentKind: in v2.1.248,
In DevelopmentSection of the release

The denylist exists; whether Bash handling filters them is not visible.

What

A standalone list of shell-sensitive environment variables now exists, covering ENV, BASH_ENV, SHELLOPTS, PS4, GLOBIGNORE, LOCPATH, IFS, TMPDIR, BASH_LOADABLES_PATH and others, the kind that can hijack a shell at startup. Whether Bash command handling filters them is not visible from the constant alone.

Evidence

BASH_LOADABLES_PATH

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.248 →

Feedback