Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

anthropics/claude-plugins-official

              main @ 3dc50d5
            

Fixes

CVEs

CRITICAL

Peak severity

37.5%

Coverage

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

external_plugins/telegram/server.ts: most-fixed (3 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Attackers could abuse permission prompts and execution approvals via remote contact channels. The fix restricts dangerous permission actions specifically to the owner's self-chat interface, preventing unauthorized tool execution via permission relay.

Authentication Bypass: The system was vulnerable to SMS/RCS sender ID spoofing, allowing remote parties to bypass owner authentication gates. The fix drops SMS/RCS messages by default to limit inbound communication to verified routes.

Command Injection: CI/CD automation steps evaluated untrusted execution payloads by direct shell expansion of step outputs. Utilizing intermediate environment variables instead of inline string interpolation is necessary to close this vector.