Security Good First Issues

Explora issues de código abierto agrupados bajo Security. Si la materia aparece en los metadatos con nombres más antiguos, también se tienen en cuenta.

Security

Señales del conjunto

Dificultad anotada media: 4.0/5 en 3,574 issues.
9% de 3,574 estimaciones de tiempo son de un día o menos.

Abierto Todos

[BUG] Scheduled routine (CCR) sandbox blocks outbound HTTPS to my own deployed domain Abierto

area:networking area:routines area:sandbox enhancement

anthropics/claude-code#91186 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
"instruction-shaped pattern" notice fires on read-only permission-config audit output (settings-json / bypass-permissions / permissions-allow-deny) Abierto

area:agents area:permissions area:security enhancement platform:macos

anthropics/claude-code#91191 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] MCP OAuth: --client-secret and oauth.clientSecret are silently discarded, making confidential-client MCP servers impossible to authenticate Abierto

area:auth area:mcp bug has repro platform:macos

anthropics/claude-code#91199 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature Request] Account approval process for testing access Abierto

api:anthropic area:model area:security platform:macos question

anthropics/claude-code#91201 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Fabricated user message injected into desktop session queue (content prefixed with literal 'user' role label) Abierto

area:desktop area:security bug platform:macos

anthropics/claude-code#91207 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Desktop app: sessions read a stale, isolated filesystem view that never re-syncs Abierto

area:desktop area:sandbox bug has repro platform:windows

anthropics/claude-code#91214 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] PermissionRequest hook: permission_suggestions does not match the rows the permission dialog actually shows Abierto

area:hooks area:permissions bug has repro platform:macos

anthropics/claude-code#91216 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
I appreciate you reaching out, but I need to clarify: I'm Claude Code, Anthropic's CLI tool for developers. This message appears to be about account access issues or billing disputes that are outside my scope. For account-related issues like: - Flagged ac Abierto

area:model bug platform:linux

anthropics/claude-code#91218 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Sockets directory is still first-come after 2.1.248, and a local account can squat both /tmp/cc-socks and the per-uid fallback Abierto

area:core area:security bug has repro platform:macos

anthropics/claude-code#91223 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature Request] Add security log analysis capability for detecting and preventing web server attacks Abierto

area:tui bug duplicate platform:vscode platform:windows

anthropics/claude-code#91238 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Overly aggressive cyber-related content filtering on authorized security research Abierto

area:model bug platform:macos platform:vscode

anthropics/claude-code#91253 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Opus 5 Safeguards Incorrectly Flagging Legitimate Code Tasks Abierto

api:anthropic area:model area:security bug duplicate platform:windows

anthropics/claude-code#91257 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: Inappropriate Safety Classifier False-Positive on Benign Code Inspection Abierto

api:anthropic area:model bug duplicate platform:windows

anthropics/claude-code#91266 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
VSCode extension: 'always allow' permission grants written to tracked .claude/settings.json instead of gitignored settings.local.json Abierto

area:permissions bug has repro platform:vscode platform:windows

anthropics/claude-code#91270 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature Request] Add security audit logging for API endpoint authentication checks Abierto

area:security enhancement platform:windows

anthropics/claude-code#91275 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
defaultMode: bypassPermissions in .claude/settings.local.json silently ignored, missing from Shift+Tab cycle Abierto

area:permissions bug has repro platform:macos

anthropics/claude-code#91296 · 4 comentarios · 3 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Assistant creates monitored files with secrets without warning user of automatic content re-ingestion Abierto

area:security area:tools bug platform:macos

anthropics/claude-code#91297 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
MCP server (Gitea) fails auth in Desktop app, connects immediately after resuming same session in Terminal app, no config changes Abierto

area:desktop area:mcp bug has repro platform:macos

anthropics/claude-code#91307 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Devcontainer: init-firewall.sh aborts on boot when two allowlisted domains resolve to the same IP (ipset duplicate + set -e) Abierto

area:sandbox bug has repro

anthropics/claude-code#91327 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] False-positive Usage Policy trigger on benign Jira licensing questions Abierto

api:anthropic area:model bug platform:macos

anthropics/claude-code#91335 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Remote Control startup fails with "disabled by your organization's policy" on a personal account; manual retry connects Abierto

area:permissions bug platform:macos

anthropics/claude-code#91344 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
: Safety classifier blocks legitimate defensive security work on own infrastructure, broadens scope after triggering Abierto

area:model area:security enhancement

anthropics/claude-code#91361 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Content Safety Filter Incorrectly Downgrades Model for Legitimate Payment Security Analysis Abierto

area:model area:security bug platform:windows

anthropics/claude-code#91380 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Fabricated user messages injected into model context with literal "user" role marker prefix Abierto

area:core area:security bug platform:macos

anthropics/claude-code#91383 · 2 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Feature Request] Add allowlist/exception mechanism for legitimate biotech research use cases Abierto

area:model enhancement platform:macos

anthropics/claude-code#91389 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Anthropic API Error: False positive content filter block on benign input "Hi" Abierto

area:model bug external platform:windows

anthropics/claude-code#91390 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Assistant emitted a fabricated user message and acted on it as authorization (ran git commit) Abierto

api:anthropic area:model area:security bug has repro platform:macos

anthropics/claude-code#91396 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Session flagged by content filter despite model confidence Abierto

area:model bug external platform:macos

anthropics/claude-code#91407 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] "Your account has been suspended". Claude Max20 account banned one day after a $249 payment — no reason, warning, or refund Abierto

area:auth area:cost bug external

anthropics/claude-code#91411 · 2 comentarios · 1 reacción · 0 asignados · Indexado el 14/9/2026
[BUG] Abierto

area:browser-extension area:chrome area:cowork bug platform:macos

anthropics/claude-code#91418 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
`--permission-mode dontAsk`: `cp`/`mv` refuse any option token (including bare `--`) while the flagless form runs; `rm` is unaffected Abierto

area:bash area:permissions bug has repro

anthropics/claude-code#91422 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] NODE_OPTIONS=--use-system-ca replaces instead of augments the bundled CA store — confirmed regression #72066 was auto-closed as not_planned Abierto

area:networking bug has repro platform:macos regression

anthropics/claude-code#91426 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Custom validator triggers false positive spam detection Abierto

area:model bug platform:macos

anthropics/claude-code#91430 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] VS Code extension logs out after idle/overnight, requires full re-login despite being logged in on claude.ai Abierto

area:auth bug platform:vscode platform:windows

anthropics/claude-code#91436 · 0 comentarios · 1 reacción · 0 asignados · Indexado el 14/9/2026
Log in opens to onboarding create your account Abierto

area:auth bug

anthropics/claude-code#91441 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] MacOS kills Claude and says "Malicious Script Blocked" Abierto

area:packaging area:security bug platform:macos

anthropics/claude-code#91447 · 4 comentarios · 2 reacciones · 0 asignados · Indexado el 14/9/2026
[FEATURE] allow to disable remote control completely Abierto

area:cli area:security enhancement

anthropics/claude-code#91459 · 2 comentarios · 9 reacciones · 0 asignados · Indexado el 14/9/2026
[SOLVED] Claude in Chrome "not connected" on Windows: stale oauth:tokenCache causes a 401 loop — fix inside Abierto

area:auth area:chrome bug has repro platform:windows

anthropics/claude-code#91469 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] blockReadsOutsideWorkingDirectories prompts for allowlisted gh commands: flag values misidentified as runtime-computed paths Abierto

area:bash area:permissions bug platform:macos

anthropics/claude-code#91479 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Internal browser crashes when accessing Windows Credential Manager during authentication Abierto

area:desktop bug platform:windows

anthropics/claude-code#91481 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Site permissions ("Allow all websites") ignored by the built-in browser in Claude Code Desktop Abierto

area:browser-extension area:desktop area:permissions bug platform:macos

anthropics/claude-code#91495 · 5 comentarios · 7 reacciones · 0 asignados · Indexado el 14/9/2026
Windows MSIX: GPU process killed by Code Integrity loading bundled vk_swiftshader.dll; app terminates and cannot relaunch Abierto

area:desktop bug has repro platform:windows

anthropics/claude-code#91504 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Auto-mode safety classifier intermittently unavailable for Write/Bash/Edit, blocking work for extended periods Abierto

api:anthropic area:permissions bug duplicate

anthropics/claude-code#91517 · 0 comentarios · 2 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] System incorrectly downgraded Max Plan to Free after requesting a refund for unapplied usage credits Abierto

area:auth bug platform:windows

anthropics/claude-code#91524 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] Windows: Claude Code CLI corrupts stdio MCP password arguments when launching npx through cmd.exe Abierto

area:mcp bug has repro platform:windows

anthropics/claude-code#91526 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[BUG] API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). Abierto

api:anthropic area:model bug duplicate platform:macos

anthropics/claude-code#91529 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
PII filter incorrectly sanitizes Figma node IDs in MCP tool responses Abierto

area:mcp area:security bug

anthropics/claude-code#91537 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
[Bug] Session-wide permission consent not persisting in Chrome extension Abierto

area:browser-extension area:chrome bug duplicate platform:linux

anthropics/claude-code#91545 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026
Claude-Session trailer still appended to commits and PR bodies with includeCoAuthoredBy: false (regression of #66504) Abierto

area:core bug git has repro

anthropics/claude-code#91546 · 4 comentarios · 4 reacciones · 0 asignados · Indexado el 14/9/2026
Browser pane can't grant local-network/loopback permission, so Duo Desktop device-health check fails (Duo-protected SSO sites unusable) Abierto

area:desktop bug platform:macos

anthropics/claude-code#91547 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 14/9/2026

Mostrando los 100 más recientes

Esta página solo lista lo indexado más recientemente. El filtro avanzado tiene el inventario completo, acotado por lenguaje, dificultad y duración.

Abrir el filtro avanzado

Security Good First Issues

Señales del conjunto

Mostrando los 100 más recientes

Recibe los nuevos issues en tu correo