{"id":"ghsa-ghsa-pq7j-f95f-qfcv","seq":2465,"kind":"advisory","title":"Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning","url":"https://github.com/advisories/GHSA-pq7j-f95f-qfcv","permalink":"https://vulnpulse.app/items/ghsa-ghsa-pq7j-f95f-qfcv","summary":"影響: npm:@anthropic-ai/claude-code < 2.1.179 → 2.1.179\nThe plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting HEAD matched the pinned SHA. An attacker controlling a plugin's upstream repository could create a branch named identically to the pinned 40-character SHA, causing the checkout to silently resolve to the attacker's branch tip instead of the reviewed commit, resulting in attacker-controlled code being installed bypassing the pinned hash.…","severity":"high","techs":["nodejs","anthropic"],"cves":["CVE-2026-86063"],"tags":["GHSA-pq7j-f95f-qfcv","@anthropic-ai/claude-code"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-15T20:22:07.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}