Follow Discord
Sweep 08 Oct 2026 · 18:53Z Build v2.1.295 516 read Stable v2.1.286 Latest v2.1.295 Next v2.1.295 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.292 ·

Object copying now drops any key named __proto__

A routine that copies data key by key now skips any key named __proto__, which closes off a known kind of attack

Under the hood Internal Changes
JSON All of v2.1.292
Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
Internal HelpersArea: what it touches
Internal ChangesKind: in v2.1.292,
Internal ChangesSection of the release
What

Claude Code has a routine that copies data key by key, going into nested data too. Before, it copied every key. It now skips any key named __proto__.

Why

In JavaScript, __proto__ is a special name. Data that contains it can change how every object in a program behaves, a problem known as prototype pollution. Dropping the key closes that route.

See this entry in the whole of v2.1.292 →

Feedback