Security: Good First Issues

Stöbern Sie in Open-Source-Issues, die unter Security gruppiert sind. Wo das Thema in den Issue-Metadaten unter älteren Namen läuft, werden diese mit abgeglichen.

Security

Kennzahlen zum Ausschnitt

Durchschnittlich annotierte Schwierigkeit: 4.0/5 über 3,320 Issues.
9% von 3,320 Aufwandsschätzungen liegen bei einem Tag oder weniger.

Offen Alle

[Bug] Claude Code CLI prevents me from reverse engineering my router. Offen

area:model bug platform:linux

anthropics/claude-code#92491 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Error: Content Policy Violation Despite Approved Researcher Status Offen

api:anthropic area:model bug duplicate platform:windows

anthropics/claude-code#92495 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] MCP client shows "token expired" for a 403 insufficient_scope response Offen

area:mcp bug has repro

anthropics/claude-code#92518 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[FEATURE] Granular control (turn limit / redact) over conversation context attached to feedback Offen

anthropics/claude-code#92519 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Windows: Remove-Item guard blocks any command containing a path with a space Offen

area:sandbox bug has repro platform:windows

anthropics/claude-code#92539 · 2 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Feature gap] Report explicit Read deny-rule decisions in headless JSON output Offen

area:permissions area:tools bug platform:macos

anthropics/claude-code#92541 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] Bash deny rules bypassed by any wrapper program outside ax()'s 8-item unwrap list Offen

area:bash area:permissions area:security bug has repro platform:linux

anthropics/claude-code#92542 · 1 Kommentar · 1 Reaktion · 0 zugewiesene Personen · Indexiert am 14.9.2026
Workflow tool rejects ordinary CRLF line endings as "hidden control characters" Offen

bug duplicate platform:windows

anthropics/claude-code#92546 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
I appreciate you sharing this, but I need to clarify: this appears to be about Fable (a programming language) and vehicle ECU parameters, which is unrelated to Claude Code (Anthropic's CLI tool for coding with Claude). If you're experiencing an issue with Offen

area:model bug platform:linux

anthropics/claude-code#92549 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Feature Request] Add content policy exceptions for game development use cases Offen

area:model enhancement platform:windows

anthropics/claude-code#92557 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[MODEL] Model defends an insecure HKDF pattern with a real-but-inapplicable RFC citation, and does not correct it when challenged Offen

area:model area:security bug model platform:linux

anthropics/claude-code#92559 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Error: Sonnet 5 Cyber Safeguards Blocking Legitimate Code Analysis Offen

api:anthropic area:model area:security bug duplicate platform:windows

anthropics/claude-code#92565 · 2 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Error: Sonnet 5 Cyber Safeguards Blocking Legitimate Code Review Offen

api:anthropic area:model area:security bug duplicate platform:windows

anthropics/claude-code#92568 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Fable 5.1 incorrectly blocked by usage credits prompt on Claude Max plan Offen

area:auth area:cost bug platform:vscode platform:windows

anthropics/claude-code#92578 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
permissions.blockReadsOutsideWorkingDirectories ignores additionalDirectories from project and local settings Offen

area:permissions bug has repro platform:macos

anthropics/claude-code#92582 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Bash tool kills every command after ~5s ("output file was replaced or could no longer be verified") when an EDR transiently hard-links new files Offen

area:bash area:sandbox bug has repro platform:macos

anthropics/claude-code#92586 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
sandbox.enabled leaves $TMPDIR read-only when CLAUDE_CODE_TMPDIR is set Offen

area:sandbox bug has repro platform:linux

anthropics/claude-code#92590 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Write/Edit denied by permission-validation with 401 "API key is invalid" — gated purely by file extension, and it also disables Auto mode (2.1.258) Offen

area:auth area:permissions bug has repro platform:windows

anthropics/claude-code#92599 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Authentication session not persisting after login Offen

area:auth bug platform:macos

anthropics/claude-code#92608 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Sandboxing unusable for JVM projects: cannot keep filesystem isolation without network isolation Offen

area:sandbox enhancement platform:macos

anthropics/claude-code#92609 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Desktop SSH remote session fails with "401 OAuth access token is invalid" while the claude CLI on the same host, same user, same credentials file works Offen

area:auth area:desktop bug has repro platform:macos

anthropics/claude-code#92613 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] No single syntax to express "these are the only files/directories Claude may read" — and every available workaround is worse Offen

area:permissions area:sandbox enhancement

anthropics/claude-code#92615 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Error: Request blocked during security audit of owned infrastructure Offen

area:model bug platform:macos

anthropics/claude-code#92617 · 1 Kommentar · 1 Reaktion · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Safety Filter False Positives on Legitimate Android Security Research Offen

area:model bug platform:windows

anthropics/claude-code#92626 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Windows: VS Code panel shows 'OAuth session expired and could not be refreshed' although re-login succeeds (stale-process refresh race + resumed session re-renders old auth error) Offen

area:auth bug has repro platform:vscode platform:windows

anthropics/claude-code#92630 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
MCP server "flow" fails to reconnect - HTTP 400 at flow.team Offen

area:mcp bug platform:windows

anthropics/claude-code#92632 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] Windows CLI Auth Error - OAuth Session Expires Before Code Can Be Pasted Offen

area:auth bug platform:windows

anthropics/claude-code#92639 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[FEATURE] Directory allowlist / default-deny support for Read/Write/Edit tools (currently only Bash has real sandboxing) Offen

area:permissions area:sandbox enhancement platform:macos

anthropics/claude-code#92643 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] Passive, auto-drafted feedback box can transmit private session content on a single keystroke — on by default, with no opt-in and no confirmation Offen

area:security area:tools area:tui bug platform:macos

anthropics/claude-code#92649 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Error: Cyber Protection Block on Local System Inspection Offen

area:model bug platform:windows

anthropics/claude-code#92663 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] `sandbox.filesystem.denyWrite` silently ignores rules containing a mid-path wildcard (Linux) Offen

area:sandbox area:security bug has repro platform:linux

anthropics/claude-code#92684 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Fable 5.1 generates false security warnings for embedded systems code Geschlossen

area:model bug needs-repro platform:linux

anthropics/claude-code#92690 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[FEATURE] Desktop browser preview: auto-allow RFC 6761 reserved TLDs (*.test) that resolve to loopback, like *.localhost Offen

area:desktop area:permissions enhancement platform:windows

anthropics/claude-code#92698 · 2 Kommentare · 1 Reaktion · 0 zugewiesene Personen · Indexiert am 14.9.2026
Worktree-isolation Bash check folds command substitutions in quoted-delimiter heredoc bodies but refuses braces there, though such bodies cannot expand Offen

area:bash area:sandbox bug platform:macos

anthropics/claude-code#92699 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] Claude in Chrome: every Google site redirects to "Verify it's you" — Chrome DBSC refuses cookie refresh on extension-initiated navigation; passkey prompt never renders in background tab Offen

area:chrome area:mcp bug has repro platform:macos

anthropics/claude-code#92703 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Remote Control appears active on a new session despite being disabled in settings Offen

area:desktop bug platform:macos

anthropics/claude-code#92704 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Cloud routines (CCR) egress proxy blocks reaching third-party APIs — no user-configurable allowlist Offen

area:networking area:routines enhancement platform:web

anthropics/claude-code#92706 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Supported isolated auth and observable skill-to-agent dispatch for native skill evaluations Offen

area:permissions area:skills question

anthropics/claude-code#92726 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] False positive security flags during legitimate cybersecurity testing on OpenPMIx Geschlossen

area:model area:security bug needs-repro platform:macos

anthropics/claude-code#92727 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] DNS configuration changes trigger Claude API safety guardrails Geschlossen

area:model bug needs-repro platform:linux

anthropics/claude-code#92728 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Session opens in Auto Mode despite permissions.defaultMode: "default" set globally in ~/.claude/settings.json Offen

area:permissions bug

anthropics/claude-code#92731 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Claude deleted user's irreplaceable personal photos with rm -rf before verifying files were moved Offen

area:bash bug data-loss high-priority

anthropics/claude-code#92737 · 1 Kommentar · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
Feature request: store MCP OAuth tokens separately from the Claude account credential (multi-account machines) Offen

area:auth area:mcp enhancement

anthropics/claude-code#92748 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Anthropic API Error: Claude 3.5 Sonnet Cyber Safeguards Blocking Legitimate Requests Offen

api:anthropic area:model area:security bug duplicate platform:macos platform:vscode

anthropics/claude-code#92765 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
macOS: "access data from other apps" (SystemPolicyAppData) prompt recurs every session on the SAME version — grant stored session-scoped (desktop-bundled worker) Offen

area:desktop area:packaging bug has repro platform:macos

anthropics/claude-code#92784 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
claude.ai connectors mount under connection UUIDs in Desktop local sessions, so `mcp__claude_ai_<name>__*` permission rules never match there (re-raising #77598, closed as stale) Offen

area:desktop area:mcp area:permissions bug has repro platform:macos

anthropics/claude-code#92787 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] Workspace trust not persisted across sessions (Code tab, macOS 15.5) Offen

area:desktop bug has repro platform:macos

anthropics/claude-code#92801 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[Bug] Overly broad safety filter flags legitimate telecom debugging as "Cyber" Offen

area:model bug duplicate platform:macos platform:vscode

anthropics/claude-code#92807 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[BUG] Switching between accounts in Claude Desktop appears to pause running tasks on the other account Offen

area:cowork area:desktop bug

anthropics/claude-code#92813 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026
[FEATURE] `.agentsignore`: gitignore-syntax file for paths agents must never access Offen

area:permissions area:security enhancement

anthropics/claude-code#92816 · 0 Kommentare · 0 Reaktionen · 0 zugewiesene Personen · Indexiert am 14.9.2026

Die neuesten 100 werden angezeigt

Diese Seite listet nur das zuletzt Erfasste. Der vollständige Bestand steht im erweiterten Filter, eingegrenzt nach Sprache, Schwierigkeit und Aufwand.

Erweiterten Filter öffnen

Security: Good First Issues

Kennzahlen zum Ausschnitt

Die neuesten 100 werden angezeigt

Neue Issues direkt in Ihr Postfach