@siteboon/claude-code-ui
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @siteboon/claude-code-uipage 1 of 1
- CVE-2026-31861HIGHCVSS 8.8EG 8.8✓ Fixed in 1.24.02026-03-11
Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, The /api/user/git-config endpoint constructs shell commands by interpolating user-supplied gitName and gitEmail …
- CVE-2026-31975CRITICALCVSS 9.8EG 9.8✓ Fixed in 1.25.02026-03-11
Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken direc…
Check whether @siteboon/claude-code-ui is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @siteboon/claude-code-ui CVEs against the assets you own.
Start Free Scan →