@anthropic-ai/sdk
1.1.0 · 21 Oct 2026Apache-2.028.3M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for @anthropic-ai/sdk. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 1.1.0 | No known advisory | |
| 0.137.0 | No known advisory | |
| 0.136.0 | No known advisory | |
| 0.135.0 | No known advisory | |
| 0.134.0 | No known advisory | |
| 0.133.0 | No known advisory | |
| 0.132.1 | No known advisory | |
| 0.131.0 | No known advisory | |
| 0.130.0 | No known advisory | |
| 0.129.0 | No known advisory | |
| 0.128.0 | No known advisory | |
| 0.127.0 | No known advisory | |
| 0.126.0 | No known advisory | |
| 0.125.0 | No known advisory | |
| 0.124.0 | No known advisory | |
| 0.123.0 | No known advisory | |
| 0.122.0 | No known advisory | |
| 0.121.0 | No known advisory | |
| 0.120.0 | No known advisory | |
| 0.119.0 | No known advisory | |
| 0.118.0 | No known advisory | |
| 0.117.1 | No known advisory | |
| 0.116.0 | No known advisory | |
| 0.115.0 | No known advisory | |
| 0.114.0 | No known advisory | |
| 0.113.0 | No known advisory | |
| 0.112.5 | No known advisory | |
| 0.111.0 | No known advisory | |
| 0.110.0 | No known advisory | |
| 0.109.1 | No known advisory | |
| 0.108.0 | No known advisory | |
| 0.107.0 | No known advisory | |
| 0.106.0 | No known advisory | |
| 0.105.0 | No known advisory | |
| 0.104.2 | No known advisory | |
| 0.103.0 | No known advisory | |
| 0.102.0 | No known advisory | |
| 0.101.0 | No known advisory | |
| 0.100.1 | No known advisory | |
| 0.99.0 | No known advisory | |
| 0.98.1 | No known advisory | |
| 0.97.1 | No known advisory | |
| 0.96.0 | No known advisory | |
| 0.95.2 | No known advisory | |
| 0.94.0 | No known advisory | |
| 0.93.0 | No known advisory | |
| 0.92.0 | No known advisory | |
| 0.91.1 | Safe from 0.91.1 | |
| 0.90.0 | 1 open advisory, worst moderate | |
| 0.89.0 | 1 open advisory, worst moderate | |
| 0.88.0 | 1 open advisory, worst moderate | |
| 0.87.0 | 1 open advisory, worst moderate | |
| 0.86.1 | 1 open advisory, worst moderate | |
| 0.85.0 | 1 open advisory, worst moderate | |
| 0.84.0 | 1 open advisory, worst moderate | |
| 0.82.0 | 1 open advisory, worst moderate | |
| 0.81.0 | 1 open advisory, worst moderate | |
| 0.80.0 | 2 open advisories, worst moderate | |
| 0.79.0 | 2 open advisories, worst moderate | |
| 0.78.0 | No known advisory | |
| 0.77.0 | No known advisory | |
| 0.76.0 | No known advisory | |
| 0.75.0 | No known advisory | |
| 0.74.0 | No known advisory | |
| 0.73.0 | No known advisory | |
| 0.72.1 | No known advisory | |
| 0.71.2 | No known advisory | |
| 0.70.1 | No known advisory | |
| 0.69.0 | No known advisory | |
| 0.68.0 | No known advisory | |
| 0.67.1 | No known advisory |
- ModerateClaude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory ToolGHSA-p7fg-763f-g4gf · 29 Apr 2026
- 0.91.x0.91.0Fixed in 0.91.1
- 0.90.x0.90.0No fix on 0.90.x · move to 0.91.1
- 0.89.x0.89.0No fix on 0.89.x · move to 0.91.1
- 0.88.x0.88.0No fix on 0.88.x · move to 0.91.1
- 0.87.x0.87.0No fix on 0.87.x · move to 0.91.1
- 0.86.x0.86.0 – 0.86.1No fix on 0.86.x · move to 0.91.1
- 0.85.x0.85.0No fix on 0.85.x · move to 0.91.1
- 0.84.x0.84.0No fix on 0.84.x · move to 0.91.1
- 0.82.x0.82.0No fix on 0.82.x · move to 0.91.1
- 0.81.x0.81.0No fix on 0.81.x · move to 0.91.1
- 0.80.x0.80.0No fix on 0.80.x · move to 0.91.1
- 0.79.x0.79.0No fix on 0.79.x · move to 0.91.1
- ModerateClaude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling DirectoriesGHSA-5474-4w2j-mq4c · 1 Apr 2026
- 0.80.x0.80.0No fix on 0.80.x
- 0.79.x0.79.0No fix on 0.79.x
Registry facts last checked 23 Oct 2026. Releases and advisories last read 23 Oct 2026.