{"data":{"id":"01d0c868-5b77-40ed-b21a-fdad4435c672","title":"CVE-2025-59828: Claude Code is an agentic coding tool. Prior to Claude Code version 1.0.39, when using Claude Code with Yarn versions…","summary":"CVE-2025-59828 affects Claude Code before version 1.0.39 when used with Yarn 2.0+. Yarn plugins execute automatically when yarn --version runs, which can bypass the directory trust dialog because plugins run before the user accepts the risks of an untrusted directory. Users of Yarn Classic were not affected.","solution":"This issue has been fixed in version 1.0.39. Users on standard Claude Code auto-update received the fix automatically. Users performing manual updates are advised to update to the latest version.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59828","publishedAt":"2025-09-24T20:15:33.527Z","cveId":"CVE-2025-59828","cweIds":["CWE-829","CWE-862"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@< 1.0.39 (fixed: 1.0.39)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":[],"affectedVendorsRaw":["Claude Code","Yarn"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code trust dialog bypass through Yarn plugin auto-execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00363,"epssCheckedAt":"2026-11-04T18:09:12.821Z","kevDateAdded":null,"advisoryAliases":["GHSA-2jjv-qf24-vfm4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:36.233Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-07-01T16:59:41.396Z","daysToFix":-85,"fixCheckedAt":"2026-10-29T21:43:36.562Z","capecIds":["CAPEC-122","CAPEC-437"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"1.0.39","matchedVersion":"1.0.39","fixReleasedAt":"2025-07-01T16:59:41.396Z","daysToFix":-85,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:43:36.411Z"}]}}