Security Good First Issues

Explora issues de código abierto agrupados bajo Security. Si la materia aparece en los metadatos con nombres más antiguos, también se tienen en cuenta.

Security

Señales del conjunto

Dificultad anotada media: 4.0/5 en 3,320 issues.
9% de 3,320 estimaciones de tiempo son de un día o menos.

Abierto Todos

[Bug] Cybersecurity filter incorrectly flags password management system creation Abierto

area:model area:security bug platform:macos

anthropics/claude-code#92329 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Remote Control auto-start reports "re-login required" when the OAuth refresh simply hasn't landed yet (credential still renewable) Abierto

area:auth bug has repro platform:windows

anthropics/claude-code#92330 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
System-reminder wrapper for CLAUDE.md/MEMORY.md uses injection-shaped language ("OVERRIDE any default behavior... MUST follow exactly as written") Abierto

area:core area:security enhancement

anthropics/claude-code#92346 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] /permissions silently drops existing rules with lowercase tool names when adding a new rule Abierto

area:permissions bug data-loss

anthropics/claude-code#92350 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] UserPromptSubmit hook registered and valid but never invoked on real prompt submission (Git Bash CLI, Windows, v2.1.261) — possible regression of #17277 Abierto

area:hooks bug has repro platform:windows regression

anthropics/claude-code#92353 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Scheduled tasks: expose a per-task directory-access grant (parity with local-agent-mode's userSelectedFolders) Abierto

area:permissions area:routines area:security enhancement

anthropics/claude-code#92357 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
A non-string entry in sandbox.filesystem.denyRead/denyWrite silently disables permissions.deny and PreToolUse hooks (2.1.261) Abierto

area:permissions area:sandbox area:security bug has repro platform:wsl

anthropics/claude-code#92365 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Session resumes and executes further tool calls after a hard trust-safety block, via background-task completion notification Abierto

area:core area:desktop area:security bug platform:macos

anthropics/claude-code#92369 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Feature request: opt-in local bridge so scheduled cloud agents (routines) can use local MCP servers Abierto

area:mcp area:routines enhancement

anthropics/claude-code#92372 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] False Positive Safety Flag on Git Workflow Discussion Abierto

area:model bug platform:macos

anthropics/claude-code#92375 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
CoworkVMService fails to configure SCM recovery actions — "Access is denied" on every start Abierto

area:cowork area:desktop duplicate platform:windows

anthropics/claude-code#92379 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
permissions.defaultMode is ignored by the desktop app - new sessions always start in manual mode Abierto

area:desktop area:permissions bug platform:windows

anthropics/claude-code#92394 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Permission-denied message shows a sub-command excerpt of the Bash command, not the full command or the matching deny rule Abierto

area:bash area:permissions bug has repro platform:macos

anthropics/claude-code#92398 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Auto-mode classifier denials still append tool-substitution coaching ("use head instead of cat") on deliberate blocks — the refusal path already dropped it Abierto

area:permissions area:security bug has repro platform:wsl

anthropics/claude-code#92411 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Subagent edits in a git worktree outside the project root are treated as outside the project; additionalDirectories is the only workaround and it grants more than the worktree Abierto

area:agents area:permissions enhancement platform:macos

anthropics/claude-code#92417 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Sandbox policy does not match settings.json: allowWrite glob refused, excludedCommands intermittently proxied Abierto

area:sandbox bug has repro platform:macos

anthropics/claude-code#92445 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
I appreciate the question, but I need to clarify: I'm Claude Code, an AI assistant designed to help with coding tasks. I'm not able to provide legal advice about reverse engineering or cybersecurity. However, I notice you haven't actually reported a bug i Abierto

area:model bug platform:linux

anthropics/claude-code#92483 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] git diff --unified=0 / -U0 triggers a permission prompt despite being read-only Abierto

area:bash area:permissions bug platform:vscode platform:windows

anthropics/claude-code#92484 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature Request] Add automatic .env file protection to prevent accidental secret exposure in tool execution Abierto

area:sandbox area:security enhancement platform:macos

anthropics/claude-code#92487 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Claude Code CLI prevents me from reverse engineering my router. Abierto

area:model bug platform:linux

anthropics/claude-code#92491 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Content Policy Violation Despite Approved Researcher Status Abierto

api:anthropic area:model bug duplicate platform:windows

anthropics/claude-code#92495 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] MCP client shows "token expired" for a 403 insufficient_scope response Abierto

area:mcp bug has repro

anthropics/claude-code#92518 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[FEATURE] Granular control (turn limit / redact) over conversation context attached to feedback Abierto

anthropics/claude-code#92519 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Windows: Remove-Item guard blocks any command containing a path with a space Abierto

area:sandbox bug has repro platform:windows

anthropics/claude-code#92539 · 2 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature gap] Report explicit Read deny-rule decisions in headless JSON output Abierto

area:permissions area:tools bug platform:macos

anthropics/claude-code#92541 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Bash deny rules bypassed by any wrapper program outside ax()'s 8-item unwrap list Abierto

area:bash area:permissions area:security bug has repro platform:linux

anthropics/claude-code#92542 · 1 comentario · 1 reacción · 0 asignados · Indexado el 14/9/2026
Workflow tool rejects ordinary CRLF line endings as "hidden control characters" Abierto

bug duplicate platform:windows

anthropics/claude-code#92546 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
I appreciate you sharing this, but I need to clarify: this appears to be about Fable (a programming language) and vehicle ECU parameters, which is unrelated to Claude Code (Anthropic's CLI tool for coding with Claude). If you're experiencing an issue with Abierto

area:model bug platform:linux

anthropics/claude-code#92549 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature Request] Add content policy exceptions for game development use cases Abierto

area:model enhancement platform:windows

anthropics/claude-code#92557 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[MODEL] Model defends an insecure HKDF pattern with a real-but-inapplicable RFC citation, and does not correct it when challenged Abierto

area:model area:security bug model platform:linux

anthropics/claude-code#92559 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Sonnet 5 Cyber Safeguards Blocking Legitimate Code Analysis Abierto

api:anthropic area:model area:security bug duplicate platform:windows

anthropics/claude-code#92565 · 2 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Sonnet 5 Cyber Safeguards Blocking Legitimate Code Review Abierto

api:anthropic area:model area:security bug duplicate platform:windows

anthropics/claude-code#92568 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Fable 5.1 incorrectly blocked by usage credits prompt on Claude Max plan Abierto

area:auth area:cost bug platform:vscode platform:windows

anthropics/claude-code#92578 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
permissions.blockReadsOutsideWorkingDirectories ignores additionalDirectories from project and local settings Abierto

area:permissions bug has repro platform:macos

anthropics/claude-code#92582 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Bash tool kills every command after ~5s ("output file was replaced or could no longer be verified") when an EDR transiently hard-links new files Abierto

area:bash area:sandbox bug has repro platform:macos

anthropics/claude-code#92586 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
sandbox.enabled leaves $TMPDIR read-only when CLAUDE_CODE_TMPDIR is set Abierto

area:sandbox bug has repro platform:linux

anthropics/claude-code#92590 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Write/Edit denied by permission-validation with 401 "API key is invalid" — gated purely by file extension, and it also disables Auto mode (2.1.258) Abierto

area:auth area:permissions bug has repro platform:windows

anthropics/claude-code#92599 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Authentication session not persisting after login Abierto

area:auth bug platform:macos

anthropics/claude-code#92608 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Sandboxing unusable for JVM projects: cannot keep filesystem isolation without network isolation Abierto

area:sandbox enhancement platform:macos

anthropics/claude-code#92609 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Desktop SSH remote session fails with "401 OAuth access token is invalid" while the claude CLI on the same host, same user, same credentials file works Abierto

area:auth area:desktop bug has repro platform:macos

anthropics/claude-code#92613 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] No single syntax to express "these are the only files/directories Claude may read" — and every available workaround is worse Abierto

area:permissions area:sandbox enhancement

anthropics/claude-code#92615 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Request blocked during security audit of owned infrastructure Abierto

area:model bug platform:macos

anthropics/claude-code#92617 · 1 comentario · 1 reacción · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Safety Filter False Positives on Legitimate Android Security Research Abierto

area:model bug platform:windows

anthropics/claude-code#92626 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Windows: VS Code panel shows 'OAuth session expired and could not be refreshed' although re-login succeeds (stale-process refresh race + resumed session re-renders old auth error) Abierto

area:auth bug has repro platform:vscode platform:windows

anthropics/claude-code#92630 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
MCP server "flow" fails to reconnect - HTTP 400 at flow.team Abierto

area:mcp bug platform:windows

anthropics/claude-code#92632 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Windows CLI Auth Error - OAuth Session Expires Before Code Can Be Pasted Abierto

area:auth bug platform:windows

anthropics/claude-code#92639 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[FEATURE] Directory allowlist / default-deny support for Read/Write/Edit tools (currently only Bash has real sandboxing) Abierto

area:permissions area:sandbox enhancement platform:macos

anthropics/claude-code#92643 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Passive, auto-drafted feedback box can transmit private session content on a single keystroke — on by default, with no opt-in and no confirmation Abierto

area:security area:tools area:tui bug platform:macos

anthropics/claude-code#92649 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Cyber Protection Block on Local System Inspection Abierto

area:model bug platform:windows

anthropics/claude-code#92663 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] `sandbox.filesystem.denyWrite` silently ignores rules containing a mid-path wildcard (Linux) Abierto

area:sandbox area:security bug has repro platform:linux

anthropics/claude-code#92684 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026

Mostrando los 100 más recientes

Esta página solo lista lo indexado más recientemente. El filtro avanzado tiene el inventario completo, acotado por lenguaje, dificultad y duración.

Abrir el filtro avanzado

Security Good First Issues

Señales del conjunto

Mostrando los 100 más recientes

Recibe los nuevos issues en tu correo